
suraksha mechappeduthiya linux

nirbandhitha axus niyanthranangal (mack) ulppedeyulla axus niyanthrana suraksha nayangale pinthunaykkunnathinulla oru samvidaanam nalkunna oru linux kernel suraksha modyoolaanu security-enhanced linux (selenex).
vividha linux vitharanagalil cherttha kernel parishkkaranangaludeyum user-space toolukaludeyum oru koottamaanu selenex. suraksha nayangalil ninnu suraksha theerumaanangalude nadappaakkal verthirikkaanum suraksha nayam nadappakkunnathumaayi bandhapetta softweyarinte alavu kaaryakshamamakkaanum athinte ghadana shramikkunnu. selenexinu adisthaanamaaya pradhana ashayangal yunaittad stetts naashanal security ejansiyude (ensa) munbathe niravadhi padhathikalil ninnu kandethanakum.
avalokanam.
ensa security-enhanced linux team ensa selenexine ingane vivarikkunnu
kernalinte pradhana subsistangalilekku shakthavum vazhakkamullathum nirbandhithavumaaya axus kantrol (mack) architecture nalkunnathinaayi linux kernalilekkum yoottilittikalilekkum oru koottam paachukal. rahasyaathmakathayudeyum samagrathayudeyum aavashyakathakale adisthaanamaakki vivarangal verthirikkunnathinulla oru mechappetta samvidaanam ithu nalkunnu, ithu krithrimathvathinte bheeshanikal pariharikkanum aaplikkeshan suraksha samvidaanangale marikadakkaanum anuvadikkukayum kshudrakaramaayatho thettaayatho aaya aaplikkeshanukal moolamundaakunna naashanashtangal thadayaanulla samvidaanam praapthamaakkukayum cheiyunnu. pothuvaaya, pothu-uddeshya suraksha lakshyangal niravettunnathinaayi roopakalppana cheytha oru koottam sample suraksha naya konfigareshan fayalukal ithil ulppedunnu.
selenex samyojippikkunna oru linux kernel upayokthru prograamukaleyum sisttam sevanangaleyum parimithappedutthunna nirbandhitha axus niyanthrana nayangalum fayalukalilekkum network vibhavangalilekkum ulla praveshanavum nadappilaakkunnu. jolic aavashyamaaya ettavum kuranja padavi parimithappeduthunnathu eee prograamukaludeyum demonukaludeyum takararo vittuveezhchayo undengil dosham varuthanulla kazhivu kuraykkukayo illaathaakkukayo cheiyunnu (udaaharanathinu buffer ovarflokal allengil thettaaya konfigareshanukal vazhi). eee thadankal samvidaanam parambaraagatha linux (vivechanaadhikaaramulla) axus niyanthrana samvidaanangalil ninnu swathanthramaayi pravartthikkunnu. ithinu oru "root" suuppar user enna ashayamilla, koodaathe setuid/settgid bainarikale aashrayikkunnath polulla parambaraagatha linux suraksha samvidaanangalude ariyappedunna poraaymakal pankidunnilla.
oru "parishkkarikkappedaathu" linux sisttathinte (selenex illaatha oru sisttam) suraksha kernelinteyum ellah prathyeka aaplikkeshanukaludeyum avayude oro konfigareshanukaludeyum krithyathaye aasrayichirikkunnu. eee mekhalakalilonnil enthengilum thakaraarundenkil athu muzhuvan samvidaanathilum vittuveezhcha anuvadichekkaam. ithinu vipareethamaayi, oru "parishkkaricha" sisttathinte suraksha (oru selenex kerneline adisthaanamaakkiyulla) praadhamikamaayi kernalinte krithyathayeyum athinte suraksha-naya krameekaranatheyum aasrayichirikkunnu. aaplikkeshanukalude krithyathayo konfigareshano sambandhicha prasnangal vyakthigatha upayokthru prograamukaludeyum sisttam demonukaludeyum parimithamaaya vittuveezhcha anuvadikkumenkilum, avaa mattu upayokthru prograamukaludeyum sisttam demonukaludeyum surakshaykko mothatthil sisttathinte surakshaykko bheeshaniyaakanamennilla.
shudhamaaya veekshanakonil ninnu nokkumbol, nirbandhitha axus niyanthranangal, nirbandhitha samagratha niyanthranangal, roll adhishtitha axus niyanthranam (rbac), type enfozhsment architecture ennivayil ninnu edutha aashayangaludeyum kazhivukaludeyum oru sankarayinam selenex nalkunnu. vividha suraksha nayangal nirmmikkaan moonnaam kakshi upakaranangal oraale prapthamaakkunnu.
charithram.
oru unix (kooduthal krithyamaayi paranjaal, posics) computing parithasthithikkullil nirbandhithavum vivechanaadhikaaramullathumaaya axus niyanthranangal (mack, daaku) nalkunna oru sameepanathe staanderdais cheiyunnathinulla aadyakaala pravartthanam deseeya suraksha ejansiyude vishwasaneeyamaaya unix (treasics) working groupinode aaropikkaavunnathaanu, athu 1987 muthal 1991 vare yogam chernnu oru mazhavillu pusthakam (#020a) prasidheekarikkukayum aathyanthikamayi prasidheekarikkappedaathu oru aupachaarika modalum anubandha moolyanirnnaya thelivu prototype (#020b) nirmmikkukayum cheythu.
linux kammyoonittiyil nirbandhitha axus niyanthranangalude moolyavum atharam niyanthranangal linuxil engane cherkkaamenn pradarshippikkunnathinnaan selenex roopakalppana cheythirikkunnathu. thudakkathil, selenex nirmmikkunna paachukal linux kernel uravidathil vyakthamaayi prayogikkendathundu; linux kernalinte 2.6 seereesil selenex linux kernel mainline layippichu.
selenexinte yadhaartha praadhamika developeraaya ensa 2000 desember 22nuu gnu gplinte keezhil ooppan sozhs development communitikkaayi aadya pathipp puratthirakki. software 2003 august 8nuu puratthirakkiya mainline linux kernel 2.6.0-test3-ll layippichu. redu haatt, network associates, secure computing korppareshan, tressis teknolaji, vishwasaneeyamaaya computer solutionukal ennivayaanu mattu pradhana sambhavakar. freebsd, darvin operating systengalkkaayi vishwasaneeyamaaya bsd project vazhi flask/tii nadappaakkalinte pareekshana porttukal labhyamaakkiyittund.
suraksha mechappeduthiya linux fluxes advanced security kernel (flask) nadappilaakkunnu. atharamoru kernelil fluke operating sisttathil prototype cheytha vasthuvidyaa gadakangal adangiyirikkunnu. tharam nadappaakkal, roll adhishtitha axus niyanthranam, multy level security ennee aashayangale adisthaanamaakkiyullava ulppede palatharam nirbandhitha axus niyanthrana nayangal nadappilaakkunnathinu iva pothuvaaya pinthuna nalkunnu. maakkil ninnu labhicha distributed vishwasaneeyamaaya operating sisttamaaya detosine detosinte roopakalppanayilum nadappakkalilum swaadheenam cheluthiya vishwasaneeyamaaya vivara samvidaanangalil ninnulla gaveshana padhathiyaaya vishwasaneeyamaaya makkineyum adisthaanamaakkiyullathaayinu flask.
yadhaarthavum bahyavumaaya sambhavakar.
2009ll attakuttappanikal nirthunnathuvare selenexinte yadhaartha, baahya sambhaavakarude samagramaya pattika ensa websaittil hosttucheythu. internettu archive wayback mesheen samrakshichirikkunnathu inipparayunna pattika yadhaarthathe punarnirmmikkunnu. avarude sambhaavanakalude vyaapthi pejil pattikappedutthukayum hraswathaykkaayi ozhivaakkukayum cheythuvenkilum archive cheytha pakarppiloode athu axus cheyyaan kazhiyum.
upayokthaakkal, nayangal, suraksha sandarbhangal.
selenex upayokthaakkalum rolukalum yadhaartha sisttam upayokthakkalumaayum rolukalumaayum bandhappettirikkanamennila. oro nilavile upayokthaavinum allengil prakriyaykkum, selenex oru upayokthrinaamam, roll, domaine (allengil tharam) enniva ulkkollunna moonnu string sandarbham nalkunnu. eee samvidaanam saadhaaranayaayi aavashyamullathinekkaal kooduthal vazhakkamullathaan chattam pole, mikka yadhaartha upayokthaakkalum ore selenex upayokthrinaamam pankidunnu, koodaathe ellah axus niyanthranavum moonnaamathe tagg, domainiloodeyaanu kaikaaryam cheiyunnathu. oru prathyeka domainilekku oru prakriya anuvadikkunna saahacharyangal poolisikalil krameekarikkanam. oru prakriya vyakthamaayi nirddishta sandarbhathilekku (upayokthaav, roll, domaine) samaarambhikkaan command kokwos _ 1 anuvadikkunnu, ennaal poolisi amgeekarichillenkil selenex parivartthanam nishedhikkaam.
fayalukal, network porttukal, mattu hardwareukal ennivaykku oru peru, roll (apoorvvamaayi maathrame upayogikkunnulloo), tharam enniva ulkkollunna oru selenex sandarbhamundu. phayal sisttangalude kaaryatthil, fayalukalum suraksha sandarbhangalum thammilulla mappingine labeling ennu vilikkunnu. labeling poolisi fayalukalil nirvachichirikkunnuve poolisikal maattathe thanne swamedhayaa krameekarikkaanum kazhiyum. hardware tharangal valare vishadamaayathaanu, udaaharanathinu, kokvi _ 2 (folder/binnile ellah fayalukalum) allengil kokvi _ 3 (postgresskvil portt, 5432). oru vidoora phayal sisttathinte selenex sandarbham moundu samayat vyakthamaayi vyakthamaakkam.
selenex shell kamaandukalaaya cocks _ 5, cocks _ 6, mattu chilathilekku cocks _ 4 switch cherkkunnu, ithu fayalukaludeyo prakriyayudeyo suraksha pashchaathalam kaanaan anuvadikkunnu.
saadhaarana naya niyamangalil vyakthamaaya anumathikal adangiyirikkunnu, udaaharanathinu, thannirikkunna lakshyathode chila pravartthanangal nadatthaan upayokthaavin eathu domainukal undaayirikkanam (vaayikkuka, execute cheyyuka, allengil, network porttinte kaaryatthil, bandhippikkuka allengil bandhippikkuka) thudangiyava. rolukalum suraksha thalangalum ulppedunna kooduthal sankeernamaaya maappingukalum saadhyamaan.
oru saadhaarana nayathil oru mapping (labeling) phayal, oru ruul phayal, domaine parivartthanatthe nirvachikkunna oru interface phayal enniva adangiyirikkunnu. orotta poolisi phayal nirmmikkunnathin eee moonnu fayalukalum selenex toolukalumaayi samyojippikkanam. thathfalamaayundaakunna poolisi phayal kernalilekku looad cheyth athu sajeevamakkaam. loading, unloading nayangalkk reboot aavasyamilla. poolisi fayalukal onnukil kaikondu ezhuthappettatho kooduthal upayokthrisauhruda selenex maanejment toolil ninnu srishtikkaan kazhiyunnatho aanu. avaa saadhaaranayaayi aadyam permitteevu modil pareekshikkunnu, avide lamghanangal logue cheythenkilum anuvadaneeyamaanu. aaplikkeshante ellah niyamaanusritha pravartthanangalum parimithappedutthaan anuvadikkunnathinu nayam vipuleekarikkunna adhika niyamangal nirmmikkaan cockways _ 7 upakaranam pinneedu upayogikkaam.
savisheshathakal.
selenex savisheshathakalil iva ulppedunnu
datthedukkal.
selenex android pathipp 4.3 muthal nadappaakkiyittund.
soujanya community pinthunayulla linux vitharanagalil, fedora coor 2 muthal sthirasthithiyaayi pinthunaykkunnathulpped aadyakaala sweekarthaakkalil oraalaayirunnu fedora. mattu vitharanagalil pathipp 9 stretch releasile debian, 8.4 hardy heronile ubundu enniva polulla pinthuna ulppedunnu. pathipp 11.1 prakaram, ooppan yoosil selenex "basic enablement" adangiyirikkunnu. suse linux enterprise 11 selenex oru "teknolaji preview" aayi avatharippikkunnu.
corios container linux, archetti thudangiya linux kandeynarukale adisthaanamaakkiyulla sisttangalil selenex janapriyamaan. vinyasicha kandeynarukalum avayude hosttum thammil kooduthal ottappedal nadappilakkaan sahaayikkunnathin oru adhika suraksha niyanthranamaayi ithu upayogapradamaanu.
2005 muthal redu haatt enterprise linux (arhl) pathipp 4-nteyum bhaaviyile ellah releasukaludeyum bhaagamaayi selenex labhyamaan. centosinteyum shaasthreeya linuxinteyum anubandha pathippukalilum eee saannidhyam prathifalikkunnu. paramavadhi eluppathil upayogikkaan lakshyamidunna, athinaal athu kazhiyunnathra niyanthrithamallaatha, arhl4-leeii pinthunaykkunna nayam targettucheytha nayamaan. lakshyamidunna nayathil kooduthal lakshyangal sthaapikkaan bhaaviyile rell pathippukal aasoothranam cheythittundu, ithu kooduthal niyantritha nayangal ardhamaakkum.
saahacharyangal upayogikkuka.
oro upayokthaavineyum prosess cheyyaanum demon anuvadikkunna eathu pravarthanangalaanu selenexinu valare krithyamaaya savisheshathakalode niyantrikkaan kazhiyuka. daattaabes enchinukal allengil daatta axus pravartthana avakashangalum vyakthamaayi nirvachicha web serverukal polulla demonukale parimithappedutthaan ithu upayogikkunnu. ithu vittuveezhcha cheyyappedunna oru parimithamaaya demonil ninnulla saadhyathayulla dosham parimithappedutthunnu.
command-line yoottilittikalil iva ulppedunnu
qoq _ 8,
9,
10,
qoq _ 1,
12,
13,
14,
15,
16,
17,
18,
kookk _ 19
20,
21,
22,
23,
24,
25,
26,
27,
oppam coach _ 28
udaaharanagal.
selenex enforcing modil ulppeduthunnathinu
selenex staattas anweshikkaan
aayudhadhaariyumaayi thaarathamyam cheyyuka.
instaal cheytha softwearinu cheyyaan kazhiyunna pravartthanangal niyanthrikkunna prashnathinulla saadhyamaaya niravadhi sameepanangalilonnaan selenex. mattoru janapriya badal upakaranathe apparmer ennu vilikkunnu, ithu syoos linux enterprise server (ezz. ell. iii. ezz), ooppan yoos, debian adhishtitha plaattphomukal ennivayil labhyamaan. ippol pravarthanarahithamaaya immunics linux plaattphominte oru gadakamaayaanu apparmer vikasippichath. attarmarum selenex parasparam samoolamaayi vyathyasappettirikkunnathu, avaa software niyanthranathinu vyathyasthamaaya badalukal roopappeduthunnu. selenex kooduthal aavishkaaraparamaaya oru koottam naya thiranjeduppukalilekku praveshanam nalkunnathinaayi chila ashayangal veendum kandupidikkumbol, dsic upayogikkunna athe administrative ardhashaasthram nirbandhitha axus niyanthrana thalatthilekku vyaapippichukond lalithamaaya reethiyilaan apparmer roopakalppana cheythirikkunnathu.
niravadhi pradhana vyathyaasangalund
samanamaaya samvidaanangalum mechappeduthalukalum.
prakriyakalude ottappeduthal vertualisation polulla samvidaanangaliloodeyum poortthiyaakkaan kazhiyum; udaaharanathinu, olpc project, athinte aadya nadappakkalil bharam kuranja vezhsarvarukalil sandbox cheytha vyakthigatha aaplikkeshanukal. koodaathe, suraksha mechappeduthiya androidil chila selenex ashayangal ensa sweekarichittundu.
redu haatt enterprise linuxinulla oru multy level security (emm. ell. ezz) mechappeduthalaaya pittbul vishwasaneeyamaaya operating sisttam general dynamics nirmmikkukayum vitharanam cheyyukayum cheiyunnu.
vivechanaadhikaaramulla axus niyanthranathiloodeyum type enfozhsmentiloodeyum axus kooduthal niyantrikkunnathinaayi vibhagangalumaayi fayalukal label cheyyaan upayokthaakkale anuvadikkunna redu haatt enterprise linuxinaayulla selenexinte oru mechappeduthalaanu multy-kattagari security (mcs). multy level security (emm. ell. ezz) upayogikkunna censitivity levalukalkkullil vibhagangal adhika compartmentukal nalkunnu.