Re: SELinux Design Documentation

On Mon, 2005-03-07 at 08:37 -0800, Casey Schaufler wrote:
> So, where is the "official" design
> documentation for SELinux kept?

The original design and implementation technical report is available from
http://www.nsa.gov/selinux/papers/slinux-abs.shtml, which describes the design and implementation of the original SELinux kernel patch. A follow-on report describing the LSM-based SELinux is available from http://www.nsa.gov/selinux/papers/module-abs.shtml, but the copy presently on the NSA web site is out of date with respect to the 2.6 SELinux; we've just updated it to reflect the current code in the CVS tree (available from the sourceforge site), and that will show up on the NSA site when we make an updated release based on 2.6.11, likely later this week. However, I don't expect any of this to be sufficient for evaluation; as with the already completed CAPP/EAL3 and CAPP/EAL4 evaluations done for Linux, I expect there to be a lot of further documentation to have to be created for evaluation of SELinux.

-- 
Stephen Smalley <sds@tycho.nsa.gov>
National Security Agency


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.