2

AppArmor could be closer compared to SELinux than FireJail, but here's the differences. The most important (IMO) is the level at which they run. FireJail runs as a program in userspace while AppArmor runs at the kernel level. FireJail takes advantage of Linux namespaces to provide isolation on a user, mount, network, and process level. This isolation ...


1

To be clear this question is more of an opinion then a hard fact. Selinux and Firejail preform sandboxing by separate mean. SeLinux at its core is a advances access control list (using Labels), while Firejail make use Seccomp and Linux Namespaces (https://firejail.wordpress.com/). Yes, installing setuid program do alway have a danger and since you already ...


Only top voted, non community-wiki answers of a minimum length are eligible