摘要
操作系统安全是信息安全的一个重要方向。Linux安全模块(LSM)为Linux操作系统内核支持多个安全模块提供了有力的支持。首先介绍了LSM的实现机制,详细分析了它的关键技术。然后,以一个具体的安全模块为例,描述了如何使用LSM机制在Linux操作系统中完成一个简单的安全模块的开发。介绍了安全模型构建的过程,并对它的安全性进行了讨论。使用LSM框架可以使得操作系统灵活的支持和采用各种不同的安全策略,提高系统的安全性。
The security of operating system is an important aspect of information security. The Linux security module （LSM） has developed a lightweight, general purpose, access control framework for the mainstream Linux kernel that enables many different access control models to be implemented as loadable kernel modules. The implementation of LSM is presented, some of its key technologies is given. Then, how to develop a simple security module based on LSM is discussed. The steps of implementing this security module is introduced, and its security is discussed. Using LSM can support multiple security policies in a flexible way and improve the security of system.
出处
《计算机工程与设计》
CSCD
北大核心
2008年第24期6281-6284,共4页
Computer Engineering and Design
基金
江苏省计算机信息处理技术重点实验室基金项目(KJS0824)
