Reprinted from the Proceedings of the Linux Symposium July 23rd–26th, 2008 Ottawa, Ontario Canada Conference Organizers Andrew J. Hutton, Steamballoon, Inc., Linux Symposium, Thin Lines Mountaineering C. Craig Ross, Linux Symposium Review Committee Andrew J. Hutton, Steamballoon, Inc., Linux Symposium, Thin Lines Mountaineering Dirk Hohndel, Intel Gerrit Huizenga, IBM Dave Jones, Red Hat, Inc. Matthew Wilson, rPath C. Craig Ross, Linux Symposium Proceedings Formatting Team John W. Lockhart, Red Hat, Inc. Gurhan Ozen, Red Hat, Inc. Eugene Teo, Red Hat, Inc. Kyle McMartin, Red Hat, Inc. Jake Edge, LWN.net Robyn Bergeron Dave Boutcher, IBM Mats Wichmann, Intel Authors retain copyright to all submitted papers, but have granted unlimited redistribution rights to all as a condition of submission. SELinux for Consumer Electronics Devices Yuichi Nakamura Yoshiki Sameshima Hitachi Software Engineering Hitachi Software Engineering
[email protected] [email protected] Abstract without security updates, because the process of updating introduces several problems. Some CE As the number of network-connect Consumer Electron- devices do not have a network updater. To fix vul- ics (CE) devices has increased, the security of these de- nerabilities for such devices, manufacturers have to vices has become important. SELinux is widely used recall devices, and re-write flash ROM. Even if de- for PC servers to prevent attacks from a network. How- vices do have a network updater, security patches ever, there are problems in applying SELinux to CE de- tend to be delayed or not provided, because prepar- vices. SELinux kernel, userland, and policy consume ing updates is a heavy task for manufacturers. Up- hardware resources unacceptably.