What are LSMs?Īn LSM is code compiled directly into the Linux kernel that, utilizing the LSM framework, can deny a process access to important kernel objects. Awareness of these differences can only increase our understanding of the security features and challenges in Linux systems. Some solve a common problem in unique ways while others address specific problems. If you’re a systems or software engineer who is concerned about security-hopefully all systems and software engineers-it is worthwhile to understand why there is such a variety of LSMs. There are also LSMs under development, such as SARAand KRSI, which may soon take their place in the kernel sources alongside the others. In kernel version 5.4 there are eight LSMs-SELinux, SMACK, AppArmor, TOMOYO, Yama, LoadPin, SafeSetID, and Lockdown. If you’ve used any modern Linux distribution or Android-based device, you’ve (probably) used an LSM. If you’ve used SELinux or AppArmor then you’ve used an LSM. I’m guessing, if you’re reading this post, you already have some familiarity with Linux Security Modules (LSMs).

Pros and cons of macs and dacs