Re: What is Type Enforcement Model in SELinux?

[Kernel freak <kernelfreak@xxxxxxxxx>]

Hello Friends,

                    I had already read the inevitability paper before, so I went to the next paper as mentioned by Branden. Unfortunately, it discusses TE ACM and TE policies.

As for the flask papers, SELinux inherits FLASK features, but nothing relevant to TE model was found.

I am still looking for an explanation for this, anything more would be helpful. Thank you very much for your time and patience guys.

On Sat, Mar 1, 2014 at 3:08 PM, Kernel freak <kernelfreak@xxxxxxxxx> wrote:

Hello all,

                  Thank you very much for the information. I will read and get back. You were right Joshua, I cannot find a description of the model.

On Sat, Mar 1, 2014 at 3:01 PM, Joshua Brindle <brindle@xxxxxxxxxxxxxxxxx> wrote:

Kernel freak wrote:

Hello Friends,
                      I am writing a report and I need to write about TE
model in SELinux. I searched around the net, but all the articles I read
beat around the bush and never say like ok, this is TE model for SELinux.
Can anyone be so kind and please point me out to some links which say
about TE model in SELinux and if possible an appropriate model. Thank
you for your time and patience.

You are probably having problems finding a succinct description of the model because, to my knowledge, there is no complete description as it exists today.

I'm sure Stephen will have other suggestions but you can start with the old Flask papers:
http://www.cs.utah.edu/flux/fluke/html/flask.html

The type enforcement access matrix model hasn't much changed since then but various things related to what that means on a system have (such as constraints, network access control, named transitions) evolved over time.

_______________________________________________
Selinux mailing list
Selinux@xxxxxxxxxxxxx
To unsubscribe, send email to Selinux-leave@xxxxxxxxxxxxx.
To get help, send an email containing "help" to Selinux-request@xxxxxxxxxxxxx.