SECURITY: NSA Security-enhanced Linux updated

From: Howard Holm (hdholm_at_epoch.ncsc.mil)
Date: 07/11/03 

Date: 11 Jul 2003 19:40:01 GMT

The SELinux web site <http://www.nsa.gov/selinux/> including the mail
list archive has been updated. The base kernel versions have been
updated to 2.5.74 and 2.4.21. The SELinux API redesign with xattr
support has been completed for the version 2.5 based kernel. The
SELinux daemon and utility patches have been ported to the new API.
Support for the AT_SECURE auxv entry was added. Changes were made to
bprm hook permission checking and nosuid operation. A report, "Securing
the X Window System with SELinux" was added to documentation discussing
adding SELinux controls to the window system. Finally, many contributed
patches to tools and policy have been merged and RPM spec files and
SRPMs are now provided.

Security-enhanced Linux incorporates a strong, flexible mandatory
access control architecture into the major subsystems of the Linux
kernel. The system provides a mechanism to enforce the separation of
information based on confidentiality and integrity requirements. This
allows threats of tampering and bypassing of application security
mechanisms to be addressed and enables the confinement of damage that
can be caused by malicious or flawed applications. The SELinux web
site <http://www.nsa.gov/selinux/> contains background information,
documentation, source code, and archives for the selinux mailing-list. 

-- 
Howard Holm <hdholm@epoch.ncsc.mil>
Secure Systems Research Office
National Security Agency
##########################################################################
# Send submissions for comp.os.linux.announce to: cola@stump.algebra.com #
# PLEASE remember a short description of the software and the LOCATION.  #
# This group is archived at http://stump.algebra.com/~cola/              #
##########################################################################

Relevant Pages