Toward a real MLS/SELinux system for end users: an empirical study - Archive ouverte HAL Access content directly
Conference Papers Year : 2009

Toward a real MLS/SELinux system for end users: an empirical study

Abstract

MLS has been widely used in order to respect confidentiality policies inside organizations, especially into military ones. More recently, some works have been done about the use of MLS inside Security Enhanced Linux (SELinux) operating systems. Although those mechanisms have been implemented at the operating system level, that doesn't imply that the system will be usable, from an end-user point-of-view. A study is required to evaluate the usage of a real MLS system? In this paper we will study the state of the art and survey the technology about MLS/SELinux support on computer systems, for the design of a complete user oriented system with MLS at the operating system level. Keeping in mind the main objectives of MLS (i.e., preventing information flows between users), we will deeply experiment OS level mechanisms for MLS control and applications compatibility with such controls.

Keywords

No file

Dates and versions

hal-00466351 , version 1 (23-03-2010)

Identifiers

Cite

Mathieu Blanc, Patrice Clemente, Steve-William Kissi. Toward a real MLS/SELinux system for end users: an empirical study. Workshop on Collaboration and Security (COLSEC'10), May 2009, Baltimore, United States. pp.209-216, ⟨10.1109/CTS.2009.5067483⟩. ⟨hal-00466351⟩
127 View
0 Download

Altmetric

Share

Gmail Facebook X LinkedIn More