Calsoft was engaged with the client to provide a mechanism to define and enforce clearance levels across arbitrary domains for their Networked File System (Lustre).
The engagement primarily involved:
Enforcing mandatory access control with system-wide policy enforcement and no user discretion
Enabling support for flexible mandatory access control architecture in the Linux operating system for Lustre file system
Reducing vulnerability to privilege escalation attacks