next up previous contents
Next: Linux Kernel Analysis Up: Introduction Previous: Linux Kernel Subsystems Affected   Contents

Chapter Layout

This Chapter proceeds in a way the actual implementation went with slight alterations for the reasons of clarity. For successful implementation a good understanding of Linux kernel was needed (5.2) in the first place. To provide flexibility in defining LinSec mandatory security policies, configuration data (5.3) and the process of communicating that data to LinSec (5.4) had to be specified. The choice of LinSec data structures and Linux data structures that would play major role in LinSec (5.5) was as important as the implementation of LinSec algorithms that manipulated the data (5.8, 5.9, 5.10, 5.11). The LinSec algorithms are triggered by the relevant existing Linux mechanisms (5.12). Finally, to setup and administer a proper LinSec mandatory security policy a set of userspace administrative tools is needed (5.13).