Smack (software)
Page Module:Infobox/styles.css has no content.
| Smack | |
|---|---|
| Lua error in package.lua at line 80: module 'Module:InfoboxImage/data' not found. | |
| [[Programmer|Original authorTemplate:Pluralize from text]] | Casey Schaufler |
| Initial release | Script error: No such module "Date time". |
| Operating system | Linux |
| Type | Computer security, Linux Security Modules (LSM) |
| License | GPL2 |
| Website | schaufler-ca |
Script error: No such module "Check for conflicting parameters".
Smack (full name: Simplified Mandatory Access Control Kernel) is a Linux kernel security module that protects data and process interaction from malicious manipulation using a set of custom mandatory access control (MAC) rules, with simplicity as its main design goal.[1] It has been officially merged since the Linux 2.6.25 release,[2] it was the main access control mechanism for the MeeGo mobile Operating System.[3][4] It is also used to sandbox HTML5 web applications in the Tizen architecture,[5] in the commercial Wind River Linux solutions for embedded device development,[6][7] in Philips Digital TV products.,[8] and in Intel's Ostro OS for IoT devices.[9]
Between 2016-2021, Smack was required in Automotive Grade Linux (AGL) where it provided in association with other Linux facilities the base for the AGL security framework. [10] [11] Since then the Project migrated to SELinux.
Design
Smack consists of three components:
- A kernel module that is implemented as a Linux Security Module. It works best with file systems that support extended attributes.
- A startup script that ensures that device files have the correct Smack attributes and loads the Smack configuration.
- A set of patches to the GNU Core Utilities package to make it aware of Smack extended file attributes. A set of similar patches to Busybox were also created. SMACK does not require user-space support.[12]
Criticism
Smack has been criticized for being written as a new LSM module instead of an SELinux security policy which can provide equivalent functionality. Such SELinux policies have been proposed, but none had been demonstrated. Smack's author replied that it would not be practical due to SELinux's complicated configuration syntax and the philosophical difference between Smack and SELinux designs.[13]
References
Lua error in mw.title.lua at line 404: bad argument #2 to 'title.new' (unrecognized namespace name 'Portal').
Page Template:Reflist/styles.css has no content.
- ^ Page Module:Citation/CS1/styles.css has no content."Official SMACK documentation from the Linux source tree". Archived from the original on 2013-05-01.
- ^ Page Module:Citation/CS1/styles.css has no content.Jonathan Corbet. "More stuff for 2.6.25". Archived from the original on 2012-11-02.
- ^ Page Module:Citation/CS1/styles.css has no content.Jake Edge. "The MeeGo Security Framework". Archived from the original on 2012-11-02.
- ^ Page Module:Citation/CS1/styles.css has no content.The Linux Foundation. "MeeGo Security Architecture".
{{cite web}}: CS1 maint: deprecated archival service (link) - ^ Page Module:Citation/CS1/styles.css has no content.Onur Aciicmez, Andrew Blaich. "Understanding the Access Control Model for Tizen Application Sandboxing" (PDF).
{{cite web}}: CS1 maint: deprecated archival service (link) - ^ Page Module:Citation/CS1/styles.css has no content.Wind River. "Wind River Linux 4 Product Note" (PDF). Archived from the original (PDF) on 2012-05-23.
- ^ Page Module:Citation/CS1/styles.css has no content.Wind River. "Wind River Linux 3 Product Note" (PDF). Archived from the original (PDF) on 2014-09-23.
- ^ Page Module:Citation/CS1/styles.css has no content.Embedded Alley Solutions, Inc. "SMACK for Digital TV" (PDF). Archived from the original (PDF) on 2012-09-13.
- ^ Page Module:Citation/CS1/styles.css has no content.Intel Open Source Technology Center. "Ostro™ OS Architecture Overview".
{{cite web}}: CS1 maint: deprecated archival service (link) - ^ Page Module:Citation/CS1/styles.css has no content.Automotive Grade Linux. "AGL Security Framework". Archived from the original on 2017-06-06.
- ^ Page Module:Citation/CS1/styles.css has no content.Dominig ar Foll. "AGL as a generic secured industrial embedded Linux".
{{cite web}}: CS1 maint: deprecated archival service (link) - ^ Page Module:Citation/CS1/styles.css has no content."Smack Userspace Tools README". Archived from the original on 2016-09-20.
- ^ Page Module:Citation/CS1/styles.css has no content.Casey Schaufler. "Re: PATCH: Smack: Simplified Mandatory Access Control Kernel". Archived from the original on 2016-10-12.
Further reading
- Page Module:Citation/CS1/styles.css has no content.Jake Edge (2007-08-08). "Smack for simplified access control". Linux Weekly News.
- Page Module:Citation/CS1/styles.css has no content.Jonathan Corbet (2007-02-10). "SMACK meets the One True Security Module". Linux Weekly News.
- Page Module:Citation/CS1/styles.css has no content.Casey Schaufler (January 2008). "The Simplified Mandatory Access Control Kernel" (PPT). Linux.conf.au. Archived from the original on 2014-01-11. Page Module:Citation/CS1/styles.css has no content.Session video (OGG). Melbourne, Australia.
- Page Module:Citation/CS1/styles.css has no content.Jake Edge (2008-08-06). "Ottawa Linux Symposium: Smack for embedded devices". Linux Weekly News.
- Page Module:Citation/CS1/styles.css has no content.Casey Schaufler (July 2008). "Smack in Embedded Computing" (PDF). Proceedings of the Linux Symposium. Vol. 2. pp. 186–197. Archived from the original (PDF) on 2013-06-29.
- Page Module:Citation/CS1/styles.css has no content.Jake Edge (2009-10-07). "Linux Plumbers Conference: Three sessions from the security track". Linux Weekly News.
- Page Module:Citation/CS1/styles.css has no content.Elena Reshetova, Casey Schaufler (November 2010). "Mobile Simplified Security Framework Overview" (PDF). MeeGo Conference. Archived from the original (PDF) on 2012-07-25.
Lua error in package.lua at line 80: module 'Module:Navbox/configuration' not found.
