Linux pluggable security

security buffs will want to closely track linux 2.5 kernel development once it opens up. there has been a flurry of activity on the security front. at least 12 projects want to extend the linux kernel with things like ACLs, mandatory access control, capabilities and so on. it has been very hard to keep track of these projects, and even harder to figure out how they relate to one another.

now there seems to be a consensus that all security functionality should interface with the kernel via a new linux security modules api. all the different security architectures would then be implemented as plugins, and an administrator would be free to chose what security architecture serves best his needs. a good report has been written on these efforts.

Leave a comment