Research on Validity Evaluation of Mandatory Access Control Policy under LSM Framework

Mandatory access control is an important technology to achieve security-enhanced operating system, and access control policy is core to Mandatory Access Control. The security policy generation tool is given by current mainstream of mandatory access control system, while it is lack of assessment of effectiveness of security policies. This paper analyzes the implementation method of mandatory access control based on LSM, proposes a solution based on system calls to evaluate validity of mandatory access control policy, outlines its concrete realization and verifies its effectiveness from a practical view.