NetLabel: What, Why and Where

NetLabel was developed to provide a mechanism for interoperable labeled networking for the Linux Kernel using explicit labeling protocols such as CIPSO. This new approach to interoperability enabled Linux to participate in trusted, labeled networks that had previously been limited to OSs such as Trusted Solaris and HP-UX CMW. NetLabel was first included in Linux 2.6.19 and has seen a steady stream of improvements since its initial release. NetLabel development has also helped foster a number of improvements to both the SELinux and Smack network access controls along the way.

This presentation will introduce the NetLabel labeled network framework, why it was developed and the basic architecture behind the framework. The talk will also discuss NetLabel's current capabilities for both SELinux and Smack as well as a brief overview of work currently in progress. Participants should be familiar with either SELinux or Smack.