Opensuse Tumbleweed Adopts Selinux As Default Security Module

2025-02-16 04:33:43

(MENAFN- The Arabian Post)

In a significant shift, openSUSE Tumbleweed has transitioned from AppArmor to Security-Enhanced Linux as its default Mandatory Access Control system for new installations. This change, effective from snapshot 20250211, aims to enhance system security by confining more services by default.

Announced on the openSUSE Factory mailing list, the decision aligns with efforts to increase SELinux adoption within both SUSE and openSUSE communities. Cathy Hu, SELinux Security Engineer, stated,“Users installing openSUSE Tumbleweed via the ISO image will see SELinux in enforcing mode as the default option in the installer.” She further noted that users preferring AppArmor can manually select it during installation.

This transition marks a departure from Tumbleweed's longstanding use of AppArmor as its default Linux Security Module . The move to SELinux is expected to provide more robust security features, given its widespread use in enterprise environments and its reputation for comprehensive system-wide enforcement.

It's important to note that this change affects only new installations. Existing systems running AppArmor will remain unaffected unless users choose to migrate manually. For those interested in transitioning, a detailed guide is available on the openSUSE wiki.

The openSUSE Tumbleweed minimalVM will also ship with SELinux enabled by default. However, there are no immediate plans to alter the kernel configuration; the installer will manage SELinux activation on new setups.

Community reactions have been largely positive, with many users acknowledging the enhanced security SELinux offers. Nonetheless, some, particularly those with customized AppArmor profiles, have expressed concerns about potential migration challenges. To address this, AppArmor will continue to be supported, allowing users to opt for it during installation if desired.

See also Android 16's Linux Terminal Now Capable of Running Graphical Applications

This development does not impact the openSUSE Leap 15.x release, which will continue using AppArmor as its default MAC system. The transition to SELinux is part of a broader strategy to unify security practices across SUSE and openSUSE platforms, aiming for consistency and enhanced protection against unauthorized access.

As with any significant system change, users are encouraged to report any issues encountered during the transition. The openSUSE team has emphasized the role of openQA tests in identifying and resolving potential problems early in the adoption phase.

Notice an issue? Arabian Post strives to deliver the most accurate and reliable information to its readers. If you believe you have identified an error or inconsistency in this article, please don't hesitate to contact our editorial team at editor[at]thearabianpost[dot]com . We are committed to promptly addressing any concerns and ensuring the highest level of journalistic integrity.

ADVERTISEMENT

MENAFN16022025000152002308ID1109212062

Legal Disclaimer:
MENAFN provides the information “as is” without warranty of any kind. We do not accept any responsibility or liability for the accuracy, content, images, videos, licenses, completeness, legality, or reliability of the information contained in this article. If you have any complaints or copyright issues related to this article, kindly contact the provider above.