Linux - Open Source White Papers
Automatic Placement of Authorization Hooks in the Linux Security Modules Framework
Overview The authors present a technique for automatic placement of authorization hooks, and apply it to the Linux Security Modules (LSM) framework. LSM is a generic framework which allows diverse authorization policies to be enforced by the Linux kernel. It consists of a kernel module which encapsulates an authorization policy, and hooks into the kernel module placed at appropriate locations in the Linux kernel. The kernel enforces the authorization policy using hook calls. In current practice, hooks are placed manually in the kernel. This approach is tedious, and as prior work has shown, is prone to security holes. The technique uses static analysis of the Linux kernel and the kernel module to automate hook placement.
| Publisher | University of Wisconsin | File Format | |
|---|---|---|---|
| Date Published | September 2005 | ||
| Format | White Papers | ||
| Topics | |||



