Live briefing
Everything about Linux Security Modules
Framework to support computer security models
Linux Security Modules (LSM) is a framework allowing the Linux kernel to support, without bias, a variety of computer security models. LSM is licensed under the terms of the GNU General Public License and is a standard part of the Linux kernel since Linux 2.6. As of 2025, AppArmor, LoadPin, SELinux, Smack, TOMOYO, Yama, SafeSetID, Integrity Policy Enforcement (IPE), and Landlock are the currently approved security modules in the official kernel. Wikipedia →
🧭 Start here: a 6-step reading path
- Read the overview: Linux Security ModulesA 5-minute orientation
- Skim a recent paper: RootAsRole: a security module to manage the administrative privileges for LinuxInfluential work since 2022
- Pick up a classic book: Modern Operating SystemsThe most-reprinted book on the subject
- Read the landmark paper: Consistency analysis of authorization hook placement in the Linux security modules frameworkCited 39 times
- Go sideways: Tomoyo LinuxA closely related topic
- Go sideways: AppArmorA closely related topic
📖 Definitions
No dictionary entry for this exact phrase.
🏆 Landmark papers (most cited)
Consistency analysis of authorization hook placement in the Linux security modules framework
Enhanced Memory-Safe Linux Security Modules (eLSMs) for Improving Security of Docker Containers for Data Centers
Reflections on the virtues of modularity: a case study in linux security modules
Thin Hypervisor-Based User Authentication Mechanism for Linux Security Modules
🆕 Influential since 2022
📚 Books worth reading
Modern Operating SystemsAndrew S. Tanenbaum, Herbert Bos · 1992
Unix System Administration HandbookEvi Nemeth, Garth Snyder · 1989
Apache CookbookKen Coar, Rich Bowen · 2003
Perl and ApacheAdam McDaniel · 2010
LINUXMichael Kofler · 1997
Black Hat PythonJustin Seitz, Tim Arnold · 2014
Understanding Computers Today and TomorrowDeborah Morley · 2003
Intelligent Technologies and Engineering SystemsJengnan Juang · 2013
Ranked by number of editions on Open Library, a rough measure of how lasting a book is.
🔗 Related topics
- Tomoyo Linux Tomoyo Linux (stylised as TOMOYO Linux) is a Linux kernel security module which implements mandatory access control (MAC). Tomoyo Linux is a MAC implementation…
- AppArmor AppArmor ("Application Armor") is a Linux kernel security module that allows system administrators to restrict programs' capabilities with per-program…
- SELinux Security-Enhanced Linux (SELinux) is a Linux kernel security module that provides a mechanism for supporting access control security policies, including…
- Mandatory access control In computer security, mandatory access control (MAC) refers to a type of access control by which a secured environment (e.g., an operating system or a…
- Smack (software) Smack (full name: Simplified Mandatory Access Control Kernel) is a Linux kernel security module that protects data and process interaction from malicious…
- Linux Intrusion Detection System In computer security, the Linux Intrusion Detection System (LIDS) was a patch to the Linux kernel and associated administrative tools that enhanced the…
- Type enforcement The concept of type enforcement (TE), in the field of information technology, is an access control mechanism for regulating access in computer systems…
- RSBAC RSBAC (Rule Set Based Access Control) is a free and open-source (GNU GPL) Linux kernel patch, focused on security. It extends security checks made by the…