We gratefully acknowledge support from
the Simons Foundation and member institutions.
Full-text links:


Current browse context:


Change to browse by:


References & Citations

DBLP - CS Bibliography


(what is this?)
CiteULike logo BibSonomy logo Mendeley logo del.icio.us logo Digg logo Reddit logo ScienceWISE logo

Computer Science > Cryptography and Security

Title: IFCIL: An Information Flow Configuration Language for SELinux (Extended Version)

Abstract: Security Enhanced Linux (SELinux) is a security architecture for Linux implementing mandatory access control. It has been used in numerous security-critical contexts ranging from servers to mobile devices. But this is challenging as SELinux security policies are difficult to write, understand, and maintain. Recently, the intermediate language CIL was introduced to foster the development of high-level policy languages and to write structured configurations. However, CIL lacks mechanisms for ensuring that the resulting configurations obey desired information flow policies. To remedy this, we propose IFCIL, a backward compatible extension of CIL for specifying fine-grained information flow requirements for CIL configurations. Using IFCIL, administrators can express, e.g., confidentiality, integrity, and non-interference properties. We also provide a tool to statically verify these requirements.
Comments: Extended version of the paper "IFCIL: An Information Flow Configuration Language for SELinux"
Subjects: Cryptography and Security (cs.CR)
Cite as: arXiv:2205.15915 [cs.CR]
  (or arXiv:2205.15915v1 [cs.CR] for this version)

Submission history

From: Lorenzo Ceragioli [view email]
[v1] Tue, 31 May 2022 16:03:53 GMT (162kb)

Link back to: arXiv, form interface, contact.