Skip to main content

Linux Security Modules

The LSM framework enhances security to the Linux kernel. The basic idea is to hook system calls and insert code whenever an application requests a transition to kernel (system) mode in orider to accomplish work that requiries enhances abilities.

LSM Choices

  • SELinux
  • AppArmor
  • Smack
  • Tomoyo

Only one choice can be used on a server.