TOMOYO Linux is a Mandatory Access Control (MAC) implementation for Linux operating systems. It helps to increase the security of a system, and offers administrators a competent system analysis tool.
The MAC implementation is lightweight and usable with “automatic policy configuring” feature by “LEARNING mode”, an administrators’ friendly policy language, with no need for libselinux or userland program modifications.
TOMOYO Linux consists of patches to Linux kernel and administrative utilities. When configured to restrict access, TOMOYO Linux restricts each process to only these declared behaviors and resources (like an operation watchdog). The main tool used by TOMOYO Linux is the policy editor. This provides a number of screens that serve different roles.
Key Features
- System analysis:
- Debug applications.
- Understand the behaviour of a Linux system.
- Write documentation.
- Increased security through Mandatory Access Control:
- Restrict services.
- Restrict system administrator operations.
- Create per-application network firewalls.
- Reduce impact from buffer overflows and other security exploits.
- Deploy a honeypot system to detect and counteract attempts at unauthorised use.
- Automatic policy generation.
- Simple syntax.
- Ease of use.
- No changes needed to existing binaries.
Website: tomoyo.osdn.jp
Support:
Developer: NTT Data Corporation
License: GNU General Public License v2.0
TOMOYO Linux is written in C. Learn C with our recommended free books and free tutorials.
Related Software
| MAC/RBAC Tools | |
|---|---|
| SELinux | Security enhancement to Linux |
| AppArmor | Linux Security Module implementation of name-based access controls |
| RSBAC | Patch adding several mandatory access models to the Linux kernel |
| grsecurity | Innovative set of patches for the Linux kernel |
| TOMOYO Linux | Lightweight and easy-use Mandatory Access Control |
Read our verdict in the software roundup.
 Explore our carefully curated directory of recommended free and open source software, covering every major software category.The directory forms part of our extensive collection of articles for Linux enthusiasts. It includes hundreds of detailed reviews, together with free and open source alternatives to proprietary software from companies such as Google, Microsoft, Apple, Adobe, IBM, Cisco, Oracle, and Autodesk. LinuxLinks also covers interesting projects worth exploring, Linux-compatible hardware, free programming books and tutorials, and much more. Know a useful free and open source Linux application that we haven’t covered? Tell us about it using our submission form. |
Please read our Comment Policy before commenting.