Hi,

I'm interested in getting feedback from anyone who has deployed AppArmor in a company environment. Specifically I would like to know:

1. How much of a performance hit can I expect with AppArmor ?

2. Is it buggy ? How good is the support from SuSe for AppArmor ?

3. How user friendly is the policy parser ?

4. What are the basic gotcha's that I should be aware of when setting it up ?

5. How much disk space should I allocate for event logs ?

6. Is AppArmor better than SELinux ?

7. In your opinion, given the additional burden of managing and maintaining AppArmor, is it worth it ?

Any feedback would be appreciated. Thanks,

Dave