基于框架的Linux安全增强开发技术  

Technology of Developing Security-enhanced Linux Based on Framework

作　　者：张涛[1] 王金双[2] 慎健[2] 吴波[2] 

机构地区：[1]南京大学计算机系,江苏南京210093 [2]解放军理工大学指挥自动化学院,江苏南京210007

出　　处：《解放军理工大学学报（自然科学版）》2004年第3期5-8,共4页Journal of PLA University of Science and Technology(Natural Science Edition)

摘　　要：基于框架开发软件有助于复用代码 ,提高开发效率和质量。对 LSM( Linux Security Module)和 RS-BAC( Rule Set Based Access Control)实现的 GFAC( Generalized Framework of Access Control)框架进行了分析 ,修改并扩充了 RSBAC的 GFAC框架并将其应用于 Linux安全增强操作系统的开发 。Developing software based on the framework technology can increase the reusability of source code and improve the quality of software.The LSM framework is analyzed together with the GFAC framework which is implemented by RSBAC, extended and applied in developing the security-enhanced Linux operating system. The way to use the framework is also presented.

关 键 词：Linux安全访问控制框架 Linux安全模型 基于规则集的访问控制 访问控制通用框架 

分 类 号：TP309[自动化与计算机技术—计算机系统结构] TP316.81[自动化与计算机技术—计算机科学与技术]