Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id ; Fri, 22 Dec 2000 02:30:21 -0500 Received: (majordomo@vger.kernel.org) by vger.kernel.org id ; Fri, 22 Dec 2000 02:30:12 -0500 Received: from vger.timpanogas.org ([207.109.151.240]:61445 "EHLO vger.timpanogas.org") by vger.kernel.org with ESMTP id ; Fri, 22 Dec 2000 02:30:01 -0500 Date: Fri, 22 Dec 2000 02:00:06 -0500 (EST) From: "Mike A. Harris" X-X-Sender: To: Linux Kernel mailing list Subject: The NSA's Security-Enhanced Linux (fwd) Message-ID: X-Unexpected-Header: The Spanish Inquisition Copyright: Copyright 2000 by Mike A. Harris - All rights reserved MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: linux-kernel-owner@vger.kernel.org X-Mailing-List: linux-kernel@vger.kernel.org Anyone looked into this? ---------------------------------------------------------------------- Mike A. Harris - Linux advocate - Open source advocate This message is copyright 2000, all rights reserved. Views expressed are my own, not necessarily shared by my employer. ---------------------------------------------------------------------- ---------- Forwarded message ---------- Date: Fri, 22 Dec 2000 00:14:42 +0100 From: Ralf-Philipp Weinmann To: VULN-DEV@SECURITYFOCUS.COM Content-Type: TEXT/PLAIN; charset=US-ASCII Subject: The NSA's Security-Enhanced Linux citing http://www.nsa.gov/selinux/background.html: "Researchers in the Information Assurance Research Office of the National Security Agency (NSA) worked with Secure Computing Corporation (SCC) to develop a strong, flexible mandatory access control architecture based on Type Enforcement, a mechanism first developed for the LOCK system. The NSA and SCC developed two Mach-based prototypes of the architecture: DTMach and DTOS. The NSA and SCC then worked with the University of Utah's Flux research group to transfer the architecture to the Fluke research operating system. During this transfer, the architecture was enhanced to provide better support for dynamic security policies. This enhanced architecture was named Flask. The NSA is now integrating the Flask architecture into the Linux operating system to transfer the technology to a larger developer and user community." [...] The result is available for download at the above URL as well. Has anyone here toyed with it already ? Cheers, -Ralf -- Ralf-P. Weinmann PGP fingerprint: 2048/46C772078ACB58DEF6EBF8030CBF1724 Emacs is my operating system, and Linux its device driver. -- Bake Timmons - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org Please read the FAQ at http://www.tux.org/lkml/