Implementing SELinux as a Linux Security Module

The SELinux implementation has been reworked by NAI Labs to use the LSM patch rather than its own particular kernel patch. This technical report documents the LSM-based SELinux security module. The report begins by providing an overview of LSM and a review of the SELinux basic concepts. It then provides an overview of how the LSM-based SELinux security module differs from the original SELinux kernel patch. Several aspects of the SELinux security module are then described, including its internal architecture, its initialization and exit code, its support for stacking with other security modules, and its approach for implementing the new SELinux system calls. [via]

http://www.nsa.gov/selinux/papers/module.pdf...