process monitor method: apparmor,selinux

[kuvaldini]

apparmor and selinux know as MAC whose function among others control access to network: work like firewall.

just a question to compare ebpf with apparmor and selinux blocking/filtering methods at kernel level?

_{thanks for attention!}