Explain how the below two can be differentiated - AppArmor vs Selinux ?

If you look at AppArmor vs SELinux, they are both strong and weak in the same ways. SELinux is "stronger" in that it can get even more finely grained access to files, but what does that gain an attacker over being in an apparmor profile? You're already significantly restricted in an apparmor profile. So, do you truly gain much more with SELinux?

What you do gain with SELinux (especially for policy creation, much moreso than auditing - though audit-to-allow is painful too) is added complexity. A lot of it.The path of least resistance in a Linux sandbox, such as SELinux or Apparmor, is the kernel. SELinux does nothing more than Apparmor to secure the kernel. So if an attacker wants to go the stupid route of going for design issues in Apparmor/SELinux, SELinux is potentially more secure - but that assumes the profiles are built well, and, since SELinux is so complex, we've actually seen vulnerabilties introduced with it. If an attacker is smart they'll go for the kernel, bypassing both.So they are both weak in the same ways, both strong in every way that matters, and one of them is MUCH simpler. Voila.The butterknife metaphor doesn't work, that should be obvious.