The Rule Set Based Access Control (RSBAC) Framework for Linux

Abstract

RSBAC (“Rule Set Based Access Control”) is an open source security extension for Linux kernels based on the Generalized Framework for Access Control (GFAC). It is a kernel-based access control scheme, which can be configured with a set of security policies chosen from a provided set of options and which can be used to significantly enhance Linux system security. In this paper, we present the RSBAC system architecture, the RSBAC security policy components and outline the RSBAC implementation. Besides, we briefly compare RSBAC with other Linux kernel-based access control projects.