AppArmor is implemented in user space only. SELinux is a Linux Kernel Module.

AppArmor is less complex and easier to configure than SELinux.

AppArmor neither requires nor allows any specific configuration. SELinux must always
be manually configured.

SELinux stores information in extended file attributes. AppArmor does not maintain file
specific information and states.

The SELinux configuration is loaded at boot time and cannot be changed later on
AppArmor provides user space tools to change its behavior.

By placing a # in front of the rule and restarting Snort

By placing a pass rule in local.rules and restarting Snort.

By deleting the rule and waiting for Snort to reload its rules files automatically.

By adding a pass rule to /etc/snort/rules.deactivated and waiting for Snort to reload its
rules files automatically.

Symbolic links to data outside the chroot path are followed, making files and directories
accessible

Hard links to files outside the chroot path are not followed, to increase security

The chroot path needs to contain all data required by the programs running in the chroot
environment

Programs are not able to set a chroot path by using a function call, they have to use the
command chroot

When using the command chroot, the started command is running in its own
namespace and cannot communicate with other processes

Kerberos authentication

SSH hostkey authentication

Winbind authentication

SSL certificate authentication

client pnvate-network-1 { ipaddr = 192 0 2.0/24 password = testing123-1 }

client private-network-1 { ip= 192.0.2.0/24 password-testing123-1 }

client private-network-1 { ip = 192 0 2.0/24 passwd = testing123-1 }

client private-network-1 { ip = 192 0.2.0/24 secret = testingl23-1 }

client private-network-1 { ipaddr = 192 0 2.0/24 secret = testing 123-1}

-tls-timeout 5

-tls- timeout 500

-tls- timer 5

-tls- timer 500

The non-DNSSEC records like A, AAAA or MX

The zone signing key of the zone.

The RRSIG records of the zone.

The NSEC or NSEC3 records of the zone.

The DS records pointing to the zone