| |||||||||||||
The isolate utilityThe isolate utilityPosted Jan 8, 2010 0:02 UTC (Fri) by drag (subscriber, #31333)In reply to: The isolate utility by dpquigl Parent article: The isolate utility
I guess it's like Linux were you have the pluggable security module
framework were Selinux is just one of many possible frameworks.
It'll be interesting to see what evolves out of this approach.
(Log in to post comments)
The isolate utility Posted Jan 8, 2010 0:43 UTC (Fri) by dpquigl (subscriber, #52852) [Link]
They model is different than the LSM. Historically the LSM framework has been anti stacking and for some pretty good reasons. The BSD framework has every model as a separate module that can be loaded in. They have quite a few modules for a variety of functions. They have one MLS module, two integrity modules, a module to place programs in selective jail like separations called partitions, a module to protect ports, some modules for disabling network access and "firewalling" the file system. The soundness of some of the models are up for debate but they are there none the less.
|
|||||||||||||