Research Menu

.
Skip Search Box

SELinux Mailing List

Re: Architectural doubts

From: Stephen Smalley <sds_at_epoch.ncsc.mil>
Date: Thu, 06 Jan 2005 16:03:06 -0500


On Thu, 2005-01-06 at 15:54, Juan González wrote:
> SELinux is currently implemented as an LSM module or is a variant of LSM itself?

As a module that relies on the LSM framework. SELinux started life as its own kernel patch implementing the Flask architecture in the Linux kernel, with the security policy logic encapsulated in the security server (policy engine). Then, when the LSM project was started, the SELinux project participated in the development of the LSM framework and SELinux was rewritten to use LSM, encapsulating all of SELinux (including the Flask architecture and the security server) within the SELinux module. Then both LSM and SELinux were merged into the mainline kernel, and are both included in Linux 2.6.   

-- 
Stephen Smalley <sds@epoch.ncsc.mil>
National Security Agency


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
Received on Thu 6 Jan 2005 - 16:08:54 EST
 

Date Posted: Jan 15, 2009 | Last Modified: Jan 15, 2009 | Last Reviewed: Jan 15, 2009

 
bottom

National Security Agency / Central Security Service