Subsystem Update: The 2019 Smack Update
Talkat Linux Security Summit North America 2019 · on Wednesday, 2019-08-21· at 16:55· Sapphire D, Hilton San Diego Bayfront·
summary
Smack gains a rule km cache that cuts rule-list lookup cost, a removed global label list that lowers memory use on small systems, and fixes to IPv6 ICMP neighbor handling that resolve timeouts and immediate rejects; the tree records 44 changes mostly in stacking infrastructure and then mount code. Next work replaces IPv6 port/host controls with Calypso and explores a SELinux→Smack translator, with expectation that many policy concepts won’t map automatically.
AI-written summary · about
chapters (4)
related talks
08mSub-system Update: Smack Update 2018
22mOverview and Recent Developments: Smack
45mFinally, a Smack Reference Policy
10mSmack in 2016
33mSecurity Module Stacks That Don't Fall Over
30mLSM Stacking - What You Can Do Now and What's Next
30mSecurity Module Stacks that Don't Fall Over
40mUpdate on Landlock: Lifting the File Reparenting Limits and Supporting Network Rules