论文信息 - Encoding default-based SELinux-security policy in Organization-Based Access Control Model

Encoding default-based SELinux-security policy in Organization-Based Access Control Model

SELinux is one of most used access control models in Linux operating systems. This paper provides an encoding of a default SELinux security policy using the Organization based access control model (Orbac). We will use Fedora 14 as an example of a Linux distribution in order to illustrate our encoding. For each concept (role, type, context,‥) used in SELinux we provide its counterpart in Orbac model. This confirms the expressive power of Orbac model

Salem Benferhat | Mohamed Ouzarf | Khalid Bouriche

[1] Jeffrey D. Ullman,et al. Protection in operating systems , 1976, CACM.

[2] R. Sandhu,et al. Discretionary Access Control In Object-Oriented Databases: Issues And Research Directions , 1993 .

[3] Ramaswamy Chandramouli,et al. The Queen's Guard: A Secure Enforcement of Fine-grained Access Control In Distributed Data Analytics Platforms , 2001, ACM Trans. Inf. Syst. Secur..

[4] D. Richard Kuhn,et al. A role-based access control model and reference implementation within a corporate intranet , 1999, TSEC.

[5] Peter Loscocco,et al. Meeting Critical Security Objectives with Security-Enhanced Linux , 2001 .

[6] D. Elliott Bell,et al. Secure Computer System: Unified Exposition and Multics Interpretation , 1976 .

[7] Frédéric Cuppens,et al. Organization based access control , 2003, Proceedings POLICY 2003. IEEE 4th International Workshop on Policies for Distributed Systems and Networks.