Skip to main content /TECH with IDG.net
CNN.com /TECH
CNN TV
EDITIONS





NSA offers supersecure Linux

Network World Fusion

By Deni Connor

(IDG) -- The National Security Agency, the government's security arm, along with help from Network Associates, last week announced it has made a security-enhanced version of Linux available for download.

IDG.net INFOCENTER
IDG.net
Visit an IDG site


IDG.net search



The NSA said it realizes that operating system security is necessary and that mainstream operating systems often lack critical security features that could enforce the confidentiality and integrity of network communications. Dubbed Security-Enhanced (SE) Linux, the NSA's version allows programs to have only the slimmest security permissions to run.

SE Linux has a strong, yet flexible, access control architecture incorporated into the kernel to foil tampering and bypassing of security mechanisms. The NSA chose Linux as a platform for this work because of its open environment. SE Linux does not correct any flaws in Linux, but rather serves as an example of how mandatory access controls, including superuser access, can be added to Linux.

With SE Linux, it is possible to configure a system that meets a number of security objectives such as roles-based access.

At present, SE Linux only supports the Intel x86 platform and has only been tested on Red Hat Linux.

The release includes documentation and source code.


 
 
 
 



RELATED STORIES:
• NSA grapples with Linux security
January 18, 2000

RELATED IDG.net STORIES:
RELATED SITES:
• SE Linux download
• NSA

Note: Pages will open in a new browser window
External sites are not endorsed by CNN Interactive.


 Search   

Back to the top