A Linux Security Mechanism for Multi-domain Isolation Environment

Multi-level security mechanism plays an important role in the processing of information at different security levels. This mechanism enables system managers to implement special access control for applications with different levels of security. However, the system based on this mechanism still adopts the traditional model of security policy, which renders plentiful non-malicious access requests rejected. From the point of information flow control, we present a Linux security mechanism for the Multi-domain isolation environment. First, the mechanism includes an innovative approach for handling access control requests. In addition, the access control request between partitions is defined and the access control structure within the partition is established. Our experiments and analysis show that this mechanism can not only ensure the confidentiality and integrity of data, but also improve the flexibility and the availability of the system as a whole.