LSM Stacking - Current Capabilities and Future Plans
Save Big on Coursera Plus. 7,000+ courses at $160 off. Limited Time Only! Grab it Explore the evolution and future of Linux Security Module (LSM) stacking in this 30-minute conference talk by Casey Schaufler from Intel. Learn about the advancements made since the Linux kernel 5.1, which introduced infrastructure blob management, enabling limited sharing of extended system security data and greater flexibility in combining security modules. Discover the current capabilities for data sharing, upcoming plans for expanding shareable blobs, and the ultimate goal of complete module stacking. Gain insights into restricted stacking, infrastructure managed blobs, compound contexts, classic context choices, enhanced audit data, netlabel, secmarks, and labeled NFS4. Engage with the speaker's invitation for feedback on plans and suggestions for improvements in this Linux Foundation presentation.