Just my statement: There is a similar solution that has been developed and tested for 4 years (!). You can find it at
http://www.rsbac.org.
Don't get me wrong: I believe it good that NSA goes for secured Linux, it is just that a simple Web search could have brought the two similar approaches together - and saved a lot of double work and diversification.
The current RSBAC version 1.1.0 works with kernels
2.2.17/18, 2.4.0-test11 and -test12.
Several models are included, e.g. a role model and an ACL model. Check it out.
Just my statement: There is a similar solution that has been developed and tested for 4 years (!). You can find it at
http://www.rsbac.org.
Don't get me wrong: I believe it good that NSA goes for secured Linux, it is just that a simple Web search could have brought the two similar approaches together - and saved a lot of double work and diversification.
The current RSBAC version 1.1.0 works with kernels
2.2.17/18, 2.4.0-test11 and -test12.
Several models are included, e.g. a role model and an ACL model. Check it out.
Amon Ott.