SILT: integrated logging management for security-enhanced Linux

Security-enhanced Linux offers a robust mandatory access control protection scheme that enhances standard Unix-based permissions, and allows for greater overall system security. While a wide array of configuration tools are currently available, system administration of SELinux is still cumbersome. One area that could ease some of the configuration burdens is kernel event logging, specifically for security-enhanced Linux generated events. This paper proposes a tool, called SILT, designed to enhance SELinux logging. A flexible interface supports command-line and graphical logging configuration. Backend scripts tune the logging facility, according to user direction.