Return to Abstract and Formats

Table of contents

NSA Security-Enhanced Linux (SELinux)

Operating System Security

Why is DAC inadequate?

What can MAC offer?

What can MAC offer? (cont)

MAC Implementation Issues

SELinux provides Flexible MAC

Current Directions

API Changes

API Changes (2)

API Changes (3)

API Changes (4)

File Labeling Changes

Initialization Changes

Network Access Control Changes

Coding style cleanups

Future Directions

Questions?

End of Presentation

Author: Stephen Smalley

E-mail: sds@epoch.ncsc.mil