Linux Viruses and Such

• Remedies / Lessons / Concluding Sermon (cont'd):

• Sandboxing: Little used, except inside Java. Room for improvement to Linux systems, here -- e.g., in Internet “viewer” apps.

• Modular design, privilege-dropping, chrooting.

• Access Control schemes:

• Mandatory Access Control:

• SELinux, LIDS, RSBAC

• Discretionary Access Control:

• POSIX.1e draft (1003.1e/1003.2c) ACLs

Notes: