µCLinux Security Enhancement Technology Based on MAC

CLinux is an embedded operating system with high performance. Security of µCLinux is of great importance for embedded system based on it. To solve security problems of µCLinux system, the author adopts Linux Security ModuleLSM framework and puts forth a multi-policy mandatory access control (MAC) mechanism based on both Domain and Type Enforcement (DTE) model and improved Bell-La Padula BLP model. The mechanism enhances security protection of µCLinux kernel and implements access control in fine-grain level to ensure confidentiality and integrity of the system. The scheme proves to be applied in most embedded system with properties of Level B1 security standard, which ensures security of all application softwares.