Secure computing: SELinux

[Nytro]

Secure computing: SELinux

Michael Wikberg

Helsinki University of Technology

Michael.Wikberg@wikberg.fi

Abstract

Using mandatory access control greatly increases the security

of an operating system. SELinux, which is an implementation

of Linux Security Modules (LSM), implements several

measures to prevent unauthorized system usage. The security

architecture used is named Flask, and provides a clean

separation of security policy and enforcement. This paper is

an overview of the Flask architecture and the implementation

in Linux.

KEYWORDS: SELinux, MAC, Security, Kernel, Linux,

LSM, TE, RBAC, MLS

Download:

www.tml.tkk.fi/Publications/C/25/papers/Wikberg_final.pdf