A Information-Flow-Based Verification Solution with Security Sensitivity to Check Security Policy of SELinux

Abstract

According to the implementation of multi-policy in SELinux,the authors introduce the multi-level sensitivity label into the traditional information flow analysis.On the basis of automata and linear temporal logic,an improved information flow analysis is proposed.It can verify both the integrity and confidentiality of the SELinux policies.