[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[cola:05298] SECURITY: LOMAC v1.0 Mandatory Access Control in an LKM


-----BEGIN PGP SIGNED MESSAGE-----


    LOMAC v1.0 is now available for download.  LOMAC is a security
enhancement for Linux 2.2 kernels, implemented as a Loadable Kernel
Module.  It implements a form of Low Water-Mark Mandatory Access
Control (MAC) to protect the integrity of processes and data from
viruses, Trojan horses, malicious remote users, and compromised root
daemons.

    LOMAC is designed for simplicity and compatibility with existing
software.  Although it lacks some of the advanced MAC features found
in more complex and powerful schemes, LOMAC provides a simple and
useful form of MAC integrity protection that requires:

        no kernel patches,
        no modifications to existing applications,
        no modifications to existing configuration files, and
        no site-specific configuration.

Consequently, LOMAC can be used to enhance the security of
currently-deployed systems.  Although a good number of features and
fixes remain to be implemented, LOMAC is presently functional enough
to thwart script kiddies, and is sufficiently stable for everyday use.
(I'm using it now.)  LOMAC is Free software, available under the GNU
GPL.  The distribution and supporting documentation is available via
LOMAC's Freshmeat page at:

              http://freshmeat.net/projects/lomac

                   - Tim Fraser, NAI Labs



- -- 
This article has been digitally signed by the moderator, using PGP.
http://www.iki.fi/mjr/cola-public-key.asc has PGP key for validating signature.
Send submissions for comp.os.linux.announce to: linux-announce _at_ news.ornl.gov
PLEASE remember a short description of the software and the LOCATION.
This group is archived at http://www.iki.fi/mjr/linux/cola.html

-----BEGIN PGP SIGNATURE-----
Version: 2.6.3ia
Charset: latin1

iQCVAgUBOlipeVrUI/eHXJZ5AQGcyAQA1XDGuTv2CUvqtqh/1056ySQF6Az+u4qn
5KqBoBAcKV+5OjAs+hY3wLgXHRZ4gmE2DWlhvZJjezjo/425FNGmf2lAcrdz1a44
YAfijXusHWylwZJnoL693MvCv29h70/DW/NK8LpkUWQSaSPWk7oHjSFhdbv73bXe
2La7famFRL8=
=9X9n
-----END PGP SIGNATURE-----

この情報があなたの探していたものかどうか選択してください。
yes/まさにこれだ!   no/違うなぁ   part/一部見つかった   try/これで試してみる

あなたが探していた情報はどのようなことか、ご自由に記入下さい。特に「まさにこれだ!」と言う場合は記入をお願いします。
例:「複数のマシンからCATV経由でipmasqueradeを利用してWebを参照したい場合の設定について」