Adding security to OpenEMR and GNU Health

摘要

GNU Health and OpenEMR are two open source tools used for managing a healthcare facility. SELinux is a Linux kernel security module that provides Mandatory Access Control which can be applied to Linux projects in the healthcare domain. As attacks on IT infrastructure in the now more closely resemble those in the business and government space, it makes sense for the defensive measures to more closely resemble those used in industry and various federal government agencies. In this paper, firstly, we discuss the existing access control policy of OpenEMR and GNU Health, detail as to how SELinux can protect servers in the wider healthcare case, and develop the SELinux policies for both GNU Health and OpenEMR services as applicable to a healthcare organization.