secPaver: Security Policy Development Tool
summary
secPaver is a policy development tool that generates enforcement rules (for mechanisms like SELinux and AppArmor) from an application’s permission description to enforce least-privilege. It provides a unified configuration format and operations for multiple security mechanisms and supports policy configuration, automatic generation, test runs, missing-rule collection, iterative development, and exporting policy packages.
AI-written summary · about
related talks
40mSecurity Policy Management: Easy as PIE
35mPodSecurityPolicy Replacement: Past, Present, and Future
30mPod Security as an Afterthought
42mPaver: the build tool you missed
24mSecurity as Code A SecDevOps Use Case
17mBuilds You (and Others) Can Trust: Meet the AMPEL Policy Engine
23mSecure Your Systems the Better Way Using Policy-as-Code
27mSecurity-by-construction: How to weave authorization into modern app stacks using Open Policy Agent