Linux Security Modules (LSM)

Framework to add new Mandatory Access Control (MAC) extensions to the kernel.

Those extensions are not kernel modules.

• They are embedded in the kernel code.

• They can be activated or not at boot time.

• List of extensions given by /sys/kernel/security/lsm

Extensions