Скачать или смотреть P04C: New Security Models for NetBSD - Alistair Crooks

https://2016.asiabsdcon.org/

The Unix security model has traditionally used a single super user to manage machines. A person who has super-user privileges can do anything on that machine - format disks, bind “reserved” sockets, set the time, view files owned by other users. Setuid root programs are used to elevate the privileges for that program. The single super user controlling everything is also a weakness - once elevated privileges have been achieved, they can be used to do anything on the machine. In 2009, a design for an RBAC-kernel was proposed [Crooks2009]. We describe in this paper a new flattened security model for NetBSD (derived from the existing 4 security models), and, use it as a basis for new security models, including a new RBAC model, and a new model based on PGP and SSH keys for authentication within the kernel.