Team-based MAC policy over Security-Enhanced Linux
Résumé
This paper presents an implementation of team-based access control policy (TMAC) using SELinux as mandatory access control mechanism for Linux operating systems. After explaining the particularities of TMAC in an elaborate example, the paper presents the XML TMAC format developed and introduces a visualization tool that allows a user to explore the TMAC policy. Furthermore, we discuss how this policy is projected under SELinux. Finally, we discuss the limitations of this implementation and propose further future developments.