Ongoing and future work
-
Define generalized hooks for kernel (LSM Project)
-
Integrate with IPSEC/IKE and extend to support packet labeling
and policy-based protection.
-
Implement labeling and controls for NFS.
-
Implement complete polyinstantiation support.
-
Develop policy specification and analysis tools