SE/Linux is a cool thing - it's basically an attempt to forward-update a lot of the thinking that was done on building trusted operating systems and Multi-Level Secure (MLS) UNIXes in the late 1980's. Those efforts failed for a lot of reasons (cumbersome interface, policy foot-dragging, theoreticians writing specs for coders, etc) but it's great to see that some of those ideas are being brought into Linux.

Know which of the MOST IMPORTANT properties of the multi-level secure systems is not being brought into Linux? It was called "minimization" -- the idea was that for something to be secure it needs to be simple. Linux isn't exactly simple. :(

I think it's cool to see MLS ideas getting air-time, though! My guess is that all the operating systems we're using now are going to be toast in another 20 years anyhow - hopefully whoever designs the next great operating system will have at least glanced at the Orange Book.

mjr.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/334/32093#32093