NSA Security-Enhanced Linux (SELinux)
Operating System Security
Why is DAC inadequate?
What can MAC offer?
What can MAC offer? (cont)
MAC Implementation Issues
SELinux provides Flexible MAC
Current Directions
API Changes
API Changes (2)
API Changes (3)
API Changes (4)
File Labeling Changes
Initialization Changes
Network Access Control Changes
Coding style cleanups
Future Directions
Questions?
End of Presentation
Author: Stephen Smalley
E-mail: sds@epoch.ncsc.mil