Inside the Linux Security Modules

This course explains the Linux Security Modules (LSM) framework, including its architecture, security data structures, hooks, kernel configuration, and code integration. It also traces the open() system call and surveys filesystem, task, IPC, network, AppArmor, and Lockdown hooks.

Syllabus

Intro
Why Linux security module
Introduction to Linux security module
Overview of LSM Framework
Architecture of LSM
LSM Security data fields
Security data fields inside kernel objects
LSM security data structures and hooks
Integration of an LSM into the linux kernel
LSM kernel configurations
LSM Code integration with the Kernel
Kernel calling LSM Hooks
Flow of open() system call
LSM file system hooks
LSM super_block hooks
LSM file hooks
LSM Task hooks
LSM IPC hooks
LSM Network hooks
LSM Module & System hooks
APPARMOR
Lockdown
Conclusion