Thank you for trying out the system!! Quick Start Guide ================= #First, Compiling and inserting the module cd module make insmod ./srfd-final.ko #Second, install the helper programs and setup test environment cd ../ make #Third, test it # Tests related to files cd scenarios ./simpleTest.out # Tests related to sockets cd sockets ./serverHigh.out #new tab ./serverLow.out #new tab ./client.out Directories =========== ls . helpers include library module python_nl README scenarios The top level directory consists of serveral important directories. - helpers consists of helper programs for setting and getting labels of files. - library contains a so file that provide shadowing features for low integrity processes, so that they can continue to write into preference files after downgraded - module and include contain the source code of SRFD module - python_nl is a python helper that should be used with the library to provide shadowing - scenarios consists of test cases to test the SRFD module Integrity levels ================ - The module supports integrity level ranged from 0 to 7, with 7 being the highest integrity. Use getlabel to object information about a file. Use setlabel to set the min_lbl and current_lbl for a file. By default, new files have min_lbl = 1, current_lbl = 7. Additional usage ================ - Some applications maintain preference files and will read/write them whenever applications started. This is problematic when the process is downgraded. These files may also get downgraded. To solve this problem, we provided a library and a python daemon process. The python daemon process will monitor preference files downgrading events, and move those files to a shadow directory. The library will transparently shadow accesses to preference files. This makes sure applications can run smoothly even when downgraded, and high integrity applications will not be downgraded due to previous runs. Trouble shooting ================ - Some commands expected to fail did not fail: This may happen when the files involved are empty, and hence, no actual read/write has occured. Please try again with non-empty files. Please report any bugs or give any feedbacks to Wai Kit: wsze@cs.stonybrook.edu . For complete information, please visit the project page at http://seclab.cs.sunysb.edu/seclab/srfd