Snare ( system intrusion analysis and reporting environment ) is a dynamically loadable kernel module that will form the basis for a host intrusion detection facility and c2 - style auditing / event logging capability for linux Snare能夠讓你隨時(shí)了解你系統(tǒng)中內(nèi)核模塊的執(zhí)行情況,同時(shí)隨時(shí)向你報(bào)告系統(tǒng)運(yùn)行狀態(tài)
Base on lsm framework , many different access control models have been implemented as loadable kernel modules . this paper has researched the mechanism of the lsm , and implemented a kind of security auditing policy 本文對(duì)lsm的設(shè)計(jì)和安全策略的實(shí)現(xiàn)進(jìn)行深入的研究,并運(yùn)用lsm的可移植性提出了一種基于lsm的通用安全審計(jì)系統(tǒng)。
The thesis implements acl mechanism in the kernel for r , w and x permission , and a loadable kernel module with the hooks inserted into kernel by the linux security module ( lsm ) for the extended permission 提出、設(shè)計(jì)并實(shí)現(xiàn)了基于lsm安全框架的可動(dòng)態(tài)加載的acl模塊,包括插入在內(nèi)核中的12個(gè)用于細(xì)化的權(quán)限訪問(wèn)檢查的鉤子函數(shù)。
Then , combining the characteristics of linux operating system and the requirements of mobile ipv6 , the unique solution of implementing mobile ipv6 on linux is proposed using the linux module netfilter framework and the kernel module program mode of loadable kernel module 在此基礎(chǔ)上,結(jié)合linux操作系統(tǒng)的特點(diǎn)和移動(dòng)ipv6的要求,利用linux系統(tǒng)具備的netfilterframework以及l(fā)oadablekernelmodule內(nèi)核模塊編程方式提出了富有特色的解決方案。
Connecting with system booting , this thesis introduces network booting and nfs file system . connecting with kernel cutting , using modularized programming and loadable kernel module mechanism of linux , i give some rules that decide what module will be compiled in the kernel . connecting with file system cutting , elf object file , dynamic and static link , standard c library and busybox concept have been used 利用網(wǎng)卡的bootrom從網(wǎng)絡(luò)主機(jī)進(jìn)行系統(tǒng)加載, nfs文件系統(tǒng)的應(yīng)用也為系統(tǒng)調(diào)試帶來(lái)極大的便利;通過(guò)可加載內(nèi)核模塊機(jī)制進(jìn)行最小內(nèi)核的定制,提出內(nèi)核模塊選擇的基本原則;在最小文件系統(tǒng)的設(shè)計(jì)上,論文采用了busybox思想使得系統(tǒng)不存在冗余文件,對(duì)標(biāo)準(zhǔn)c庫(kù)進(jìn)行版本選擇、 elf目標(biāo)文件冗余去除、動(dòng)態(tài)鏈接和靜態(tài)鏈接選擇方案等技術(shù)來(lái)達(dá)到系統(tǒng)中每個(gè)文件都最精簡(jiǎn)。