【2021.06.24】SENG: An Enhanced Policy Language for SELinux

Time

2021.06.24

Summary

Structure

Research Objective

SELinux policy language

Problem Statement

1.the policy for a typical Linux system contains a large number of distinct types,a realistic policy will be large and unwieldy.
2.Most of the statements in the current SELinux policy language operate directly on features of the underlying access control model(底层访问控制模型的功能).
3.One of the major factors preventing widespread adoption of SELinux is the preceived diffificulty of writing policies.

Previous Method(s)

1.manage this complexity through preprocessor macros(预处理器宏),using them to encapsulate portions of the policy.（弊端：这种宏禁止用工具分析策略，对之后的改进造成了阻碍）

Method(s)

1.Introduce SENG,an experimental alternative language for writing SELinux policies.

Evaluation

Conclusion

Notes

Words

1.naming conventions 命名约定

Terminology

1.the m4 macro processor are used to express the intended policy more succinctly,hiding implementation details and providing higher-level abstractions over the rules in the underlying language.(缺点：the pervasive use of m4 inhibits the ability of automated tools to analyze a policy.)

Sentence

1.The SELinux reference policy [4] splits a policy into individual modules.

TimtLine

【2021.06.24】SENG: An Enhanced Policy Language for SELinux

原文：https://www.cnblogs.com/call-me-dasheng/p/14940662.html