How to Write a Linux Security Module
Explore the fundamentals of creating a Linux Security Module (LSM) in this comprehensive tutorial led by Casey Schaufler from Intel, joined by experts Paul Moore and John Johansen. Learn when to implement an LSM, its capabilities and limitations, and alternatives such as mainline changes and namespaces. Dive into security module data management conventions, filesystem, process, networking, and audit interfaces. Gain insights on proper implementation techniques for upstream acceptance, understanding LSM infrastructure, and mastering essential concepts like hooks, blobs, and access control. Cover topics including security attribute management, credential handling, task management, object-based hooks, and network security labels. Acquire the knowledge needed to enhance Linux kernel security through expert guidance in this 95-minute session.