Towards the Specification of Access Control Policies on Multiple Operating Systems

Ab5troct- In the past, operating systems tended to lack well-defined access control policy specification languages and syntax. For example, a UNIX operating system that is based on the Discretionary Access Control (DAC) paradigm has decentralized security policies based on technology that has been developed over the years. W ith such policies, it is difficult to identify the permissions given to each user, and who has what access to which resources. With the ad vent of recent security-enhanced operating systems such as SELinux, this is no longer the case; the access control policy for almost all resources is now stored centrally and applied universally throughout the system. This is certainly more manageable but is not without costs. Firstly, such policies tend to be complex. Secondly, as more of such systems are developed, each system would have its own policy specifica tion syntax. A system administrator who intends to evaluate 01 ' migrate to a new system would have to learn the syntax of the new system. In this paper, we propose a solution to this problem by introducing the initial design of a new policy specification language that can be used to represent access control policies for multiple operating systems. To serve its purpose, this language must be fiexible enough to cater to many operating systems, while being sufficiently extensible to support the specific features of each target operating sys tem. We present the criteria, features, and approach that we are using to design the language. We also describe the role of t""o systems- SELinux and Systrace- in the design of our language. We also discuss our consideration of ASL as a potential candidate language, and why we chose to design our own language instead. I