Integrating Flexible Support for Security Policies into the Linux Operating System

摘要

The protection mechanisms of current mainstream operating systems are inadequate to support confidentiality and integrity requirements for end systems. To address this problem, the National Security Agency (NSA) worked with Secure Computing Corporation (SCC) to develop a strong,flexible mandatory access control architecture based on Type Enforcement. This architecture is called Flask. This paper presents the design and implementaion for integrating the security mechanisms of the Flask architecture into the Linux kernel.