Sixth IEEE International Symposium on Cluster Computing and the Grid Workshops (CCGRIDW'06) Work in Progress: RASS Framework for a Cluster-Aware SELinux Singapore May 16-May 19 ISBN: 0-7695-2585-7
Cluster computing has certainly evolved from a luxury affordable to few, to an ever increasing necessity. The growing deployments of clusters to solve critical and computationally intensive problems imply that survivability is a key requirement through which the systems must possess Reliability, Availability, Serviceability and Security (RASS) together. In this paper, we conduct a feasibility study on SELinux and the existing cluster-aware RASS framework [5]. We start by understanding a semantic mapping from cluster-wide security policy to individual nodes? Mandatory Access Control (MAC). Through our existing RASS framework, we then construct an experimental cluster-aware SELinux system. Finally, we demonstrate feasibility of mapping distributed security policy (DSP) to SELinux equivalences and the cohesiveness of cluster enforcements, which, we believe, leads to a layered technique and thus becomes highly survivable.
Citation:
Arpan Darivemula, Chokchai Box, Anand Tikotekar, Makan Pourzandi, "Work in Progress: RASS Framework for a Cluster-Aware SELinux," ccgrid, vol. 2, pp.29, Sixth IEEE International Symposium on Cluster Computing and the Grid Workshops (CCGRIDW'06), 2006 Usage of this product signifies your acceptance of the Terms of Use. | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||