Design
Smack consists of three components:
- A kernel module that is implemented as a Linux Security Module. It works best with file systems that support extended attributes.
- A startup script that ensures that device files have the correct Smack attributes and loads the Smack configuration.
- A set of patches to the GNU Core Utilities package to make it aware of Smack extended file attributes. A set of similar patches to Busybox were also created. SMACK does not require user-space support.
Read more about this topic: Simplified Mandatory Access Control Kernel
Famous quotes containing the word design:
“Joe ... you remember I said you wouldn’t be cheated?... Nobody is really. Eventually all things work out. There’s a design in everything.”
—Sidney Buchman (1902–1975)
“I begin with a design for a hearse.
For Christ’s sake not black—
nor white either—and not polished!
Let it be weathered—like a farm wagon—”
—William Carlos Williams (1883–1963)