īuilt-in policy files which are located under kernel source directory as security/ccsecurity/policy/domain_nf, security/ccsecurity/policy/exception_nf, security/ccsecurity/policy/nf, security/ccsecurity/policy/nf and security/ccsecurity/policy/nf have been aggregated into security/caitsith/policy/nf. etc/ccs/policy/current/domain_nf, /etc/ccs/policy/current/exception_nf, /etc/ccs/policy/current/nf, /etc/ccs/policy/current/nf and /etc/ccs/policy/current/nf have been aggregated into /etc/caitsith/policy/current. proc/ccs/domain_policy, /proc/ccs/exception_policy, /proc/ccs/profile, /proc/ccs/manager and /proc/ccs/stat have been aggregated into /sys/kernel/security/caitsith/policy.

If you are already using TOMOYO Linux, please read the difference described below.ġ.1. Using file's attributes in conditionsĬaitSith was derived from TOMOYO Linux, but usage of CaitSith would be too different to imagine that CaitSith was derived from TOMOYO Linux. Using file's DAC permissions in conditions Using environment variable arguments in conditions Using command line arguments in conditions Using process's information in conditions Steps for writing access restriction rules Example of simple access restriction rule Check whether CaitSith kernel module can be loaded or not (Optional)

2.1 How to install LKM-based LSM version.Difference with TOMOYO (for existing TOMOYO users) This module is designed for ease of use.ġ. opening files, executing programs) at the kernel level. This module gives you ability to restrict access (e.g. CaitSith Documentation CaitSith - A simplified access restriction module for system protection.ĬaitSith is an access restriction module for Linux systems.

Download sandboxie 5.53.1