SELinux by Example: Using Security Enhanced Linux

Chapter 1. Background

In this chapter

• 1.1 The Inevitability of Software Failure

• 1.2 The Evolution of Access Control Security in Operating Systems

• 1.3 Summary

• Exercises

Security Enhanced Linux (SELinux) is an exciting new technology for securing our computer networks and systems. In a real sense, it represents the culmination of nearly 40 years of operating system security research. For the first time, we have a powerful, flexible, mandatory access control mechanism incorporated into a mainstream, widely distributed operating system. In this chapter, we provide a brief overview of the history of secure operating system research as a means to motivate and set into perspective the value that SELinux brings to today’s computer security challenges. ...