摘要： 现有的主流Linux操作系统不足以提供健壮的访问控制机制,远远不能满足日益增长的多样化安全需求。介绍并分析了一种支持动态多安全策略的安全体系结构——Flask和当前流行的可支持动态加载多种安全模块的通用访问控制框架——LSM. 结合一个基于Linux的高安全等级操作系统SecLinux的开发,阐述了如何将二者合理有效地结合应用于具体的工程实现。

关键词: 动态多安全策略, 安全体系结构, 通用访问控制框架, Flask, LSM

Abstract: The existing mainstream Linux operating systems are inadequate to provide strong access control mechanisms in order to meet the rising various security requirements. This paper introduces and analyses a security architecture——Flask supporting dynamic and multiple security policies, and a general access control framework——LSM supporting different loadable security models. Based on the development of a high level Linux secure operating system SecLinux, it discusses how to adopt Flask and LSM in the practical project reasonably and effectively.

中图分类号: 

• TP309