Projects - Revision history

JarkkoSakkinen: /* Integrity */

2017-09-14T19:08:22Z

Integrity

← Older revision		Revision as of 19:08, 14 September 2017
Line 18:		Line 18:
	This is a rapidly developing area, see the following LWN article for an overview:		This is a rapidly developing area, see the following LWN article for an overview:

			* [[Linux Kernel Integrity]]
	* [http://lwn.net/Articles/309441/ System integrity in Linux]		* [http://lwn.net/Articles/309441/ System integrity in Linux]

2017-08-09T07:28:20Z

Access Control

← Older revision		Revision as of 07:28, 9 August 2017
Line 4:		Line 4:

	* [http://vger.kernel.org/vger-lists.html#linux-security-module Linux Security Modules (LSM)], the API for access control frameworks		* [http://vger.kernel.org/vger-lists.html#linux-security-module Linux Security Modules (LSM)], the API for access control frameworks
			** Mailing list archive: http://kernsec.org/pipermail/linux-security-module-archive/
	* [http://www.novell.com/linux/security/apparmor/ AppArmor], a pathname-based access control system		* [http://www.novell.com/linux/security/apparmor/ AppArmor], a pathname-based access control system
	* [http://selinuxproject.org/page/Main_Page Security Enhanced Linux (SELinux)], a flexible and fine-grained MAC framework		* [http://selinuxproject.org/page/Main_Page Security Enhanced Linux (SELinux)], a flexible and fine-grained MAC framework

2015-11-04T16:02:43Z

Kernel Security Projects

← Older revision		Revision as of 16:02, 4 November 2015
Line 44:		Line 44:

	* [[Linux Security Workgroup]]		* [[Linux Security Workgroup]]

			=== Self Protection ===

			* [[Kernel Self Protection Project]]

2012-10-08T21:59:25Z

Kernel Security Projects

← Older revision		Revision as of 21:59, 8 October 2012
Line 40:		Line 40:

	The cryptographic subsystem is maintained separately by Herbert Xu, refer to the [http://vger.kernel.org/vger-lists.html#linux-crypto mailing list].		The cryptographic subsystem is maintained separately by Herbert Xu, refer to the [http://vger.kernel.org/vger-lists.html#linux-crypto mailing list].

			=== Working Group ===

			* [[Linux Security Workgroup]]

2012-04-16T16:39:01Z

Kernel Security Projects

← Older revision		Revision as of 16:39, 16 April 2012
Line 31:		Line 31:
	* Labeled Networking, including NetLabel, CIPSO, Labeled IPsec and SECMARK, see [http://paulmoore.livejournal.com/ Paul Moore's blog]		* Labeled Networking, including NetLabel, CIPSO, Labeled IPsec and SECMARK, see [http://paulmoore.livejournal.com/ Paul Moore's blog]
	* [http://www.nufw.org/ NuFW] authenticating firewall based on Netfilter		* [http://www.nufw.org/ NuFW] authenticating firewall based on Netfilter


	=== Storage ===		=== Storage ===

2012-04-16T16:37:54Z

Access Control

← Older revision		Revision as of 16:37, 16 April 2012
Line 11:		Line 11:
	* [http://www.rsbac.org/why Rule Set Based Access Control (RSBAC)], Linux kernel patch implementing a security framework		* [http://www.rsbac.org/why Rule Set Based Access Control (RSBAC)], Linux kernel patch implementing a security framework
	* [http://schreuders.org/FBAC-LSM FBAC-LSM] aims to provide easy to configure (functionality-based) application restrictions		* [http://schreuders.org/FBAC-LSM FBAC-LSM] aims to provide easy to configure (functionality-based) application restrictions
	* [http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=blob;f=Documentation/security/Yama.txt;hb=HEAD\|Yama] adds restrictions to ptrace, providing a programmatic way to declare relationships between processes		* [http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=blob;f=Documentation/security/Yama.txt;hb=HEAD Yama] adds restrictions to ptrace, providing a programmatic way to declare relationships between processes

	=== Integrity ===		=== Integrity ===

2012-04-16T16:37:23Z

Access Control

← Older revision		Revision as of 16:37, 16 April 2012
Line 11:		Line 11:
	* [http://www.rsbac.org/why Rule Set Based Access Control (RSBAC)], Linux kernel patch implementing a security framework		* [http://www.rsbac.org/why Rule Set Based Access Control (RSBAC)], Linux kernel patch implementing a security framework
	* [http://schreuders.org/FBAC-LSM FBAC-LSM] aims to provide easy to configure (functionality-based) application restrictions		* [http://schreuders.org/FBAC-LSM FBAC-LSM] aims to provide easy to configure (functionality-based) application restrictions
			* [http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=blob;f=Documentation/security/Yama.txt;hb=HEAD\|Yama] adds restrictions to ptrace, providing a programmatic way to declare relationships between processes

	=== Integrity ===		=== Integrity ===

2012-04-13T03:45:01Z

Storage

← Older revision		Revision as of 03:45, 13 April 2012
Line 34:		Line 34:
	=== Storage ===		=== Storage ===

	* [http://selinuxproject.org/page/Labeled_NFS Labeled NFS], a project to add MAC labeling support to the NFSv4 protocol		* [http://selinuxproject.org/page/Labeled_NFS Labeled NFS], a project to add MAC labeling support to the NFSv4 protocol
			* [http://git.kernel.org/?p=linux/kernel/git/torvalds/linux.git;a=blob;f=Documentation/device-mapper/verity.txt dm-verity], a device mapper target for efficient, integrity-assured block devices

	=== Cryptography ===		=== Cryptography ===

	The cryptographic subsystem is maintained separately by Herbert Xu, refer to the [http://vger.kernel.org/vger-lists.html#linux-crypto mailing list].		The cryptographic subsystem is maintained separately by Herbert Xu, refer to the [http://vger.kernel.org/vger-lists.html#linux-crypto mailing list].

2012-04-09T15:04:37Z

← Older revision		Revision as of 15:04, 9 April 2012
Line 27:		Line 27:
	There are several separately maintained projects relating to network security, including:		There are several separately maintained projects relating to network security, including:

	* Netfilter packet filtering.		* [http://www.netfilter.org/ Netfilter] packet filtering
	* Labeled Networking, including NetLabel, CIPSO, Labeled IPsec and SECMARK, see Paul Moore's blog.		* Labeled Networking, including NetLabel, CIPSO, Labeled IPsec and SECMARK, see [http://paulmoore.livejournal.com/ Paul Moore's blog]
	* NuFW authenticating firewall based on ~~netfilter~~		* [http://www.nufw.org/ NuFW] authenticating firewall based on Netfilter


	=== Storage ===		=== Storage ===

	* Labeled NFS, a project to add MAC labeling support to the NFSv4 protocol.		* [http://selinuxproject.org/page/Labeled_NFS Labeled NFS], a project to add MAC labeling support to the NFSv4 protocol


	=== Cryptography ===		=== Cryptography ===

	The cryptographic subsystem is maintained separately by Herbert Xu, refer to the mailing list.		The cryptographic subsystem is maintained separately by Herbert Xu, refer to the [http://vger.kernel.org/vger-lists.html#linux-crypto mailing list].

2012-04-09T15:02:52Z

Privileges

← Older revision		Revision as of 15:02, 9 April 2012
Line 20:		Line 20:
	=== Privileges ===		=== Privileges ===

	* POSIX File Capabilities		* [http://www.friedhoff.org/posixfilecaps.html POSIX File Capabilities]
	** Filesystem capabilities in Fedora 10 LWN article.		** [http://lwn.net/Articles/313047/ Filesystem capabilities in Fedora 10 LWN article]


	=== Networking ===		=== Networking ===