SEFlow 0.1.1

Technology<br /><br />mathematical policy model: SEFlow tries to model the policy using mathematical primitives. The core aims to be able to combine small sub-policies by computing operations like unions, intersections and cartesian products between them, making a more orthogonal approach to policy design possible.<br /><br />Possible applications<br /><br />license management: In a sufficiently large development environment, there is often a large pool of data governed under a variety of licenses to be combined to create the final product. It becomes important to keep track of the different licenses. This can conveniently be done by adding licensing information to the security contexts of the files. This way, the operating system kernel can keep track of what licensing conditions apply to the resulting data.<br /><br />strategic approach to security: Using the license management described above, it becomes possible to employ a mechanism similar to the tainting mechanism of the Linux kernel on the operating system layer. Critical system facilities can be constrained to interference by open source data, thereby ensuring better possibilities for investigating and fixing possible problems.<br /><br />State of the project<br /><br />Please note that the applications described above are not possible yet. The project is currently in a state of prototyping and could serve as a technology demo. What you can do now is to look at the already existing code and to experiment with it. There is the possibility to create a minimal policy which does not provide any security but instead makes it easy to extend upon it. Computing cartesian products of sub-policies is also working. The provide_sandbox macro can be used as a facility to test the security contexts without interfering with the running system.<br />

Requirements:	No special requirements
Platforms:	*nix, Linux
Keyword:	Controlling,  Data,  Flow,  Information,  Inside,  Policy,  Processing,  Security,  Seflow,  Selinux,  System,  Technology
Users rating:	0/10