Extending SELinux to meet LSPP data import/export requirements

Common Criteria certification of SELinux at Evaluation Assurance Level 4 against the Labeled Security Protection Profile(LSPP)[1] and Role-Based Access Control Protection Profile(RBACPP)[2] is intended to advance its acceptance and deployment in the federal sector. SELinux already provides a flexible security policy infrastructure upon which systems that conform to hierarchical Multi-level Security (MLS), as required by LSPP, and role-based access control security policies may be built. However, some RBACPP and LSPP requirements in the user data protection category and their effects on usability make support for features such as polyinstantiated directories, multi-context aware cron, and data import/export restrictions based on device security attributes desirable. This paper presents proposed extensions to SELinux to satisfy some of the LSPP data import/export and RBACPP requirements for Common Criteria certification at EAL4, while maintaining a functional and usable system.