The National Security Agency's Security-Enhanced Linux implements TE by modifying the kernel source, and the source of some supporting applications. SubDomain makes use of a small kernel patch to support its otherwise LKM-based implementation. VXE VXE , the Virtual eXecution Environment, implements a compartmentalized, virtual server MAC-like environment. VXE virtual environments are implemented in LKMs and operate with the help of a Linux kernel patch. Since these virtual environments may be tailored specifically to the resource needs of a particular application, VXE provides fine-grained support for restricting applications to least privilege.
All trademarks belong to their respective owners.
You may reproduce and distribute this document so long as this copyright statement and disclaimer are retained on all copies.