基于Linux安全模块的通用框架研究与实现

Study and Implementation of Common Framework Based on Linux Security Module

给出了LSM安全通用框架的原型构造和实现技术,并以SELinux为例论述了安全通用框架栈式堆叠安全模块,最后分析了通用框架的局限性并提出了改进方法。

This paper first presents the architecture of the LSM framework and the technology of implementation. SELinux security module is then given as a case to express the technique how the security common framework stacks up several security modules. Finally the limitation of common framework is analyzed and a amendment measure is supposed.