Status of the Work

• Prototyping of kernel internals now largely complete

  • A variety of kernel objects are labeled, including process/cached credentials, vnodes, mbufs, sockets, pipes, network interfaces, ...
  • A variety of access control entry points are available to enforce policies
  • Several policies have been authored, including prototype test, null, Biba, MLS, TE, SEBSD, “seeotheruids”, “bsdextended”, and others.