How to have access control for all users, including root, for R/W regular files, in Linux kernels newer than 2.6.35?

ronbarak · 08-10-2017, 08:26 AM

1. I have a Linux Security Module (LSM) on RedHat ES 5, kernel 2.6.18. The LSM implements access control for all users, including root, when they Read/Write regular files.
2. I'd like to implement the same functionality in CentOS 7, kernel 3.10.0.
3. However, since kernel 2.6.35, LSMs are no longer supported.

Any ideas how can I achieve {2}?

pan64 · 08-10-2017, 11:40 AM

are you looking for SElinux?

ronbarak · 08-10-2017, 03:37 PM

SElinux is indeed a possibility.
I want to research if there's also a way to take the functionality encoded in the kernel 2.6.18 LSM, and transfer it to a 3.10.0 kernel.

AwesomeMachine · 08-11-2017, 02:10 AM

You just compile into the kernel the MACs you want to use. Then, you can use any of them. You can grep the config file for the running kernel to find out which models are included in the kernel.