policy administration

policy administration

[Serge E. Hallyn]

Hi,

For the past, er,  while, I've been working on tools for dealing 
with DTE policies.  I'd now like to start applying that to selinux
policies.  Briefly, the work spanned from the extremely mundane
(a gui policy editor) to the somewhat less mundane (presenting
graphical representations of relations in policies) to the
stuff I enjoyed more (constructing policies from modules, and
analyzing policies using other MAC systems - ie using the BLP
star-property to introduce relations on types, in a manner similar
to what TIS did in 1998 to allow automatic policy updates*).

I've been looking at the website and the mailing list, and it
doesn't seem anyone is doing anything like this just yet.  If
anyone is, please let me know.

thanks,
-serge

* - see :

@article{dte:reconfigure,
author = {Timothy Fraser and Lee Badger},
title = {Ensuring Continuity During Dynamic Security Policy Reconfiguration in DTE},
journal = {Proceedings of the IEEE Symposium on Security and Privacy},
year = 1998
}

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

RE: policy administration

[Frank Mayer]

Sorry I missed this message earlier, we are doing some work in this
area.  See our web site (www.tresys.com/selinux) which has information
about released tools...within a week or two we're releasing updated
versions of our tools and a new *basic* policy browser/editor/config
tool. 

Frank

> -----Original Message-----
> Behalf Of Serge E. Hallyn
> Sent: Saturday, November 30, 2002 2:27 AM
> To: selinux
> Subject: policy administration
> 
> Hi,
> 
> For the past, er,  while, I've been working on tools for dealing
> with DTE policies.  I'd now like to start applying that to selinux
> policies.  Briefly, the work spanned from the extremely mundane
> (a gui policy editor) to the somewhat less mundane (presenting
> graphical representations of relations in policies) to the
> stuff I enjoyed more (constructing policies from modules, and
> analyzing policies using other MAC systems - ie using the BLP
> star-property to introduce relations on types, in a manner similar
> to what TIS did in 1998 to allow automatic policy updates*).
> 
> I've been looking at the website and the mailing list, and it
> doesn't seem anyone is doing anything like this just yet.  If
> anyone is, please let me know.
> 
> thanks,
> -serge


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.