Extending Linux for Multi-Level Security

LinuxTM distributions have received numerous Common Criteria certifications in the last few years. Building on the recent Controlled Access Protection Profile (CAPP) certifications, an Open Source development effort to make Linux compliant with the Labeled Security Protection Profile (LSPP) and Role-Based Access Control Protection Profile (RBACPP) has been ongoing for almost two years. Development included adding and augmenting features of SELinux and other Linux components. This paper explores the evolution of, and rationale behind, the features developed to meet LSPP and RBACPP, and it discusses the current state of development and lessons learned.