The choice here is between two strong contenders: AppArmor and SELinux. Last year we picked SELinux, included in Red Hat and a favorite with the security community. This year we're going with AppArmor, due to its superior ease of use and, well, momentum. AppArmor continues to be bundled with Suse and has caught on with Ubuntu and Mandriva. AppArmor protects applications through the use of mandatory access controls: permissions set by the underlying system -- not by users -- that prevent coding flaws or bugs in applications from being manipulated for malicious purposes. FULL REPORT ...