Re: MAC & linux

On Sat, May 19, 2001 at 07:17:56AM +0200, scai wrote:
> vi segnalo una cosina carina... magari qualcuno l'ha gia provata, visto che
> packetstorm l'ha catalogata l'11maggio..
> tempo fa si parlava di MAC integrity... beh c'e' un lkm x linux che ne
> implementa un subsystem semplificato...
> 
> LOMAC is a security enhancement for Linux that uses Low Water-Mark Mandatory
> Access Control to protect the integrity of processes and data from viruses,
> Trojan horses, malicious remote users, and compromised root daemons. LOMAC
> is implemented as a loadable kernel module - no kernel recompilations or
> changes to existing applications are required. Although not all the planned
> features are currently implemented, it presently provides sufficient
> protection to thwart script-kiddies, and is stable enough for everyday use
> http://www.pgp.com/research/nailabs/secure-execution/lomac.asp
> ftp://ftp.tislabs.com/pub/lomac/lomac-sp00.pdf  whitepaper

E' proprio LOMAC alla fine che viene integrato in SELinux (www.nsa.gov/selinux), ed e'
per questo che l'NSA ha appaltato x "1.2 milion dollars" a NAI (www.nai.com) parte
dello sviluppo di SELinux, che dovra' espandere le capacita' di LOMAC facendo un
sistema linux veramente "Trusted" .

-- 

Fabio Pietrosanti ( naif )
E-mail: naif@sikurezza.org
PGP Key (DSS) http://naif.itapac.net/naif.asc
--
Free advertising: www.openbsd.org Multiplatform Ultra-secure OS

________________________________________________________
http://www.sikurezza.org - Italian Security Mailing List