First page Back Continue Last page Overview Graphics
Kernel services call out to framework entry points for relevant events
- High-level VFS operations, inter-process activities, socket operations, networking events, devfs events...
The framework supports a set of policy modules, and calls out to those modules
- Module registration service
- Label management interfaces
- Module entry points (object events, access control)
- If multiple registered policies, composition functions