A Lightweight Type Enforcement Access Control Approach with Role Based Authorization

Type Enforcement (TE) and Role-Based Access Control (RBAC) are both applied widely in operating system security. Addressing the complexity of security configuration caused by the combination of TE and RBAC, this paper proposes a TE access control model featuring loose-coupled role authorization, named as RS-TEAC. In the model, the role-relevant subject domain transition is exploited to enable subjects with different roles entering their corresponding security domain. Hence the access control based on role authorization is achieved. The RS-TEAC model is implemented in Linux, and its effectiveness and performance are tested through a series of applications and experiments.