Policy-Enhanced Linux

Graduates from the various computer fields need to have a better education in the area of computer security problems and their solutions. In particular, there appears to be little exposure to the enforcement of non-discretionary or Mandatory Access Control (MAC) policies in automated systems. One cause of this deficiency is the expense, limited availability, and limited functionality of operating systems that support such policies. This paper provides a detailed description of an effort to modify the Linux operating system to support MAC policies and overcome these obstacles, with the hope that it can be used to improve computer security education.