Supports a number of security-related projects on linux, including linux security modules 支持了若干linux上的安全样项目,包括
4 . researched the design, interface and implementation of the linux security modules framework 四、深入研究lsm框架的设计思想、主要接口和lsm框架上安全策略的实现方法。
linux security modules ( lsm ) is a lightweight, general purpose, access control framework for the mainstream linux kernel . it provides lots of kernel-level interfaces of programming 为了满足各类应用对linux平台安全性的要求,linustorvalds提出了轻量级、通用的访问控制框架:lsm框架(linuxsecuritymodulesframework)。
The thesis implements acl mechanism in the kernel for r, w and x permission, and a loadable kernel module with the hooks inserted into kernel by the linux security module ( lsm ) for the extended permission 提出、设计并实现了基于lsm安全框架的可动态加载的acl模块,包括插入在内核中的12个用于细化的权限访问检查的钩子函数。