Status

Version 20050615

See download for download information. This release focused on infrastructure, organization, and initial design rather than comprehensive policy coverage or security improvements. Currently only the strict policy is supported, with targeted policy support planned for the future.

Components which have been completely reworked

• All TE policy is organized into modules
• Most kernel layer interfaces have documentation
• Documentation for interfaces used to create webpage documentation
• Infrastructure to support source policies and loadable binary modules
• Infrastructure to not include modules during build, replacing the unused directory.

Components which have minor improvements

• MLS infrastructure added to support easy conversion between MLS and non-MLS policy.
• Some infrastructure added to support per-user domain policy, e.g., to create types and policy for ssh, for each user.
• All labeling moved to modules.
• Tunables are documented, and in the future will be included in the webpage policy documentation.

Components that are unchanged

• Users
• Constraints
• Flask
• Genhomedircon
• Top-level Make targets