SE Linux + MLS

Calsoft was engaged with the client for providing mechanism to define and enforce clearance levels across arbitrary domains for Networked file system (Lustre)



  • Network file system could utilize benefits for SELinux MLS feature.
  • System wide policy enforcement and no user discretion – mandatory access control
  • Enabled support for flexible mandatory access control architecture in the Linux operating system for Lustre file system
  • Reduced vulnerability to privilege escalation attacks
Current Opportunities