【摘要】 由于用户安全需求的多样性与复杂性,如何构建一个支持多安全策略的访问控制框架成为操作系统安全的焦点。Linux安全模块是一种新的通用访问控制框架,它为用户定制自己的安全模块提供了一个通用接口。文中通过研究通用访问控制框架的发展历程,详细论述了LSM访问控制框架的原理,及如何在LSM下编写自己的安全模块。更多还原

【Abstract】 Because of the diversity and complexity of the security requirements, it becomes a focus problem that how to create a general framework for access control to support multiple security policies. Linux Security Modules is a new general framework for access control, which provides a general interface for user to implement own security policy as loadable kernel modules. The paper dwells on the principle of Linux Security Modules, and how to develop security modules.更多还原