First page Back Continue Last page Overview Graphics
Status of the Work
Prototyping of kernel internals now largely complete
- A variety of kernel objects are labeled, including process/cached credentials, vnodes, mbufs, sockets, pipes, network interfaces, ...
- A variety of access control entry points are available to enforce policies
- Several policies have been authored, including prototype test, null, Biba, MLS, TE, SEBSD, “seeotheruids”, “bsdextended”, and others.