Introduction – TrustedBSD

• TrustedBSD provides FreeBSD security extensions and supporting infrastructure

  • Audit and re-implementation of many kernel security checks, infrastructure (correctness, consistency)
  • File system extended attributes, ACLs
  • Mandatory access control, flexible access control framework, audit, ...
  • Supporting infrastructure including UFS2, PAM, GEOM, ...

• Topic of interest today: MAC framework