System Hardening (The Chromium Projects)のTOMOYO Linux

TOMOYO Linuxのことが書いてあると聞いたのでメモ

Adding fine-grained controls over coarse-grained capabilities with mandatory access controls
http://sites.google.com/a/chromium.org/dev/chromium-os/chromiumos-design-docs/system-hardening

For our Mandatory Access Control (MAC) needs, we are considering the external grsecurity kernel patch as well as the currently in-kernel Tomoyo module and accompanying tomoyo-ccstools package.