MAC: SELinux or AppAmor?

[ITWombat]

Yet another meaning of MAC in the computer context. For the unitiated MAC also stands for Mandatory Access Control. This a method of ensuring that an attacker who has compromised a daemoen (or service in Windows speak) does not gain control on other parts of a system.

 

I came acroos this article in Linux Magazine and was wondering if anybody here had a preference. The finer level of control of SELinux appeals to the inner geeek but the KISS principle of AppAmor also makes for better security..