Here's an update on the major changes to the kernel security subsystem for the 2.6.30 kernel.

• TOMOYO
  The TOMOYO security framework from NTT was merged. This is the first significant LSM scheme to be merged since SELinux in 2003. TOMOYO is characterized by its targeting of non-technical users, where security policy is automatically generated with ( Read more... )

Here's an update on some of the main changes to the security subsystem in the 2.6.29 kernel.

Most of the changes for this kernel relate to infrastructure work and maintenance:

• Task Credentials APIThis is a rewrite of the kernel mechanism for managing per-task credentials. David Howells has been working on this for quite some time, significantly ( Read more... )

Here's an update on the main functional changes in security for the recently released 2.6.27 kernel.

• SELinux deferred mapping of filesystem contexts
  This patch by Stephen Smalley addresses the case where "alien" SELinux security labels need to be written to the local filesystem, for example, in the case of building RPMs where the local policy is ( Read more... )