TrustedBSD

• Provide tools to allow FreeBSD to be used in high security environments; provide a framework for future security customization

  • File system extended attributes, ACLs
  • Flexible policy framework permitting compile-time and run-time extension of the kernel security policy
    • Modules implementing various interesting policies, including MAC
  • Various other privilege, security improvements