Re: SELinux for embedded devices...

[Luke Kenneth Casson Leighton <lkcl@lkcl.net>]

On Fri, Jul 29, 2005 at 06:12:29AM +0200, Lorenzo Hern?ndez Garc?a-Hierro wrote:

> El vie, 29-07-2005 a las 07:50 +0530, Sriram, Kannan escribi?:
> > Hello all,
> > 
> >  I'm a newbie to SELinux, trying to figure out if SELinux is applicable/
> > suitable to embedded system security, especially mobile terminals/
> > smartphones. I have the following very basic questions... Pls help me
> > out, or redirect me to the appropriate forum.
> > 
> > 1. Is SELinux applicable and suitable for mobile equipment, where the
> > end user always has root privileges? Has SELinux been ported to any
> > embedded device yet (some ARM platform??).

> I was working on the design of extended attributes for JFFS2 (in which
> SELinux relies for labeling file-system objects), even got help from an
> Intel guy, but I got stuck at it, without any resources for testing, and
> the Intel guy who was willing to work together with me was requested for
> legal approbation before doing anything. Thus, time passed and I
> couldn't go a step further on doing anything serious about it.

 i have a complete test environment for doing this sort of
 thing, it's been sitting unused for several months because
 the project has been shut down.

 the device is a skyminder - a 90Mhz Cirrus Logic "Maverick"
 ARM 720T and it contains a GSM radio module and a GPS module.
 the company ran out of money to do things like, oh i dunno,
 correct the radio interference from the GSM radio module
 to the audio codec and the microphone for example, which
 was only discovered recently when i developed enough of the
 drivers and test procedures to notice it was a problem.

 ... but _other_ than that, the device is perfectly serviceable,
 runs a 2.6.11 kernel, uses JFFS2 on its 16Mbyte flash RAM,
 i have all the source code blah blah full development
 environment blah blah.

 yes i briefly considered adding selinux in to the mix, but
 not on the budget they were paying me.

 l.


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.