Domain and Type Enforcement in a -Kernel

This paper addresses the challenge of securely implementing access control mechanisms within operating systems built on minimalistic-kernels. We demonstrate a natural correspondence between the partitioning of access controls provided in the domain and type enforcement security model, and the separation of kernel and user-level services provided in modern-kernel architectures. By adopting a simple table driven approach within the kernel, the approach promises ease of management, exibility and high assurance.