IBM 10 SP1 EAL4 User Manuals

Table of Contents

• 1 Introduction

  13
  • 1.1 Purpose of this document

    13
  • 1.2 Document overview

    13
  • 1.3 Conventions used in this document

    13
  • 1.4 Terminology

    13
• 2 System Overview

  14
  • 2.1 Product history

    15
    • 2.1.1 SUSE Linux Enterprise Server

      15
    • 2.1.2 eServer systems

      15
  • 2.2 High-level product overview

    15
    • 2.2.1 eServer host computer structure

      16
    • 2.2.2 eServer system structure

      18
    • 2.2.3 TOE services

      18
    • 2.2.4 Security policy

      19
    • 2.2.5 Operation and administration

      20
    • 2.2.6 TSF interfaces

      20
  • 2.3 Approach to TSF identification

    21
• 3 Hardware architecture

  24
  • 3.1 System x

    24
    • 3.1.1 System x hardware overview

      24
    • 3.1.2 System x hardware architecture

      24
  • 3.2 System p

    25
    • 3.2.1 System p hardware overview

      25
    • 3.2.2 System p hardware architecture

      25
  • 3.3 System z

    26
    • 3.3.1 System z hardware overview

      26
    • 3.3.2 System z hardware architecture

      26
  • 3.4 eServer 326

    27
    • 3.4.1 eServer 326 hardware overview

      27
    • 3.4.2 eServer 326 hardware architecture

      27
• 4 Software architecture

  30
  • 4.1 Hardware and software privilege

    30
    • 4.1.1 Hardware privilege

      30
      • 4.1.1.1 Privilege level

        30
    • 4.1.2 Software privilege

      32
      • 4.1.2.1 DAC

        33
        • 4.1.2.1.1 Subjects and objects

          33
        • 4.1.2.1.2 Attributes

          33
        • 4.1.2.1.3 Access control rules

          33
        • 4.1.2.1.4 Software privilege

          33
      • 4.1.2.2 AppArmor

        33
      • 4.1.2.3 Programs with software privilege

        34
  • 4.2 TOE Security Functions software structure

    34
    • 4.2.1 Kernel TSF software

      35
      • 4.2.1.1 Logical components

        36
      • 4.2.1.2 Execution components

        37
        • 4.2.1.2.1 Base kernel

          37
        • 4.2.1.2.2 Kernel threads

          37
        • 4.2.1.2.3 Kernel modules and device drivers

          38
    • 4.2.2 Non-kernel TSF software

      38
  • 4.3 TSF databases

    40
  • 4.4 Definition of subsystems for the CC evaluation

    40
    • 4.4.1 Hardware

      41
    • 4.4.2 Firmware

      41
    • 4.4.3 Kernel subsystems

      41
    • 4.4.4 Trusted process subsystems

      41
    • 4.4.5 User-level audit subsystem

      42
• 5 Functional descriptions

  44
  • 5.1 File and I/O management

    44
    • 5.1.1 Virtual File System

      45
      • 5.1.1.1 Pathname translation

        47
      • 5.1.1.2 open()

        49
      • 5.1.1.3 write()

        50
      • 5.1.1.4 mount()

        50
      • 5.1.1.5 Shared subtrees

        50
    • 5.1.2 Disk-based file systems

      51
      • 5.1.2.1 Ext3 file system

        51
        • 5.1.2.1.1 Extended Attributes

          51
          • 5.1.2.1.1.1 Access Control Lists

            52
        • 5.1.2.1.2 Data structures

          52
      • 5.1.2.2 ISO 9660 file system for CD-ROM

        55
        • 5.1.2.2.1 Data structures and algorithms

          55
    • 5.1.3 Pseudo file systems

      56
      • 5.1.3.1 procfs

        56
      • 5.1.3.2 tmpfs

        56
      • 5.1.3.3 sysfs

        57
      • 5.1.3.4 devpts

        57
      • 5.1.3.5 rootfs

        57
      • 5.1.3.6 binfmt_misc

        58
      • 5.1.3.7 securityfs

        58
      • 5.1.3.8 configfs

        58
    • 5.1.4 inotify

      58
    • 5.1.5 Discretionary Access Control (DAC)

      58
      • 5.1.5.1 Permission bits

        59
      • 5.1.5.2 Access Control Lists

        60
        • 5.1.5.2.1 Types of ACL tags

          60
        • 5.1.5.2.2 ACL qualifier

          60
        • 5.1.5.2.3 ACL permissions

          61
        • 5.1.5.2.4 Relationship to file permission bits

          61
        • 5.1.5.2.5 ACL_MASK

          61
        • 5.1.5.2.6 Default ACLs and ACL inheritance

          61
        • 5.1.5.2.7 ACL representations and interfaces

          61
        • 5.1.5.2.8 ACL enforcement

          62
    • 5.1.6 Asynchronous I/O

      63
    • 5.1.7 I/O scheduler

      63
      • 5.1.7.1 Deadline I/O scheduler

        64
      • 5.1.7.2 Anticipatory I/O scheduler

        64
      • 5.1.7.3 Completely Fair Queuing scheduler

        64
      • 5.1.7.4 Noop I/O scheduler

        65
    • 5.1.8 I/O interrupts

      65
      • 5.1.8.1 Top halves

        65
      • 5.1.8.2 Bottom halves

        65
      • 5.1.8.3 Softirqs

        65
      • 5.1.8.4 Tasklets

        66
      • 5.1.8.5 Work queue

        66
    • 5.1.9 Processor interrupts

      66
    • 5.1.10 Machine check

      66
  • 5.2 Process control and management

    67
    • 5.2.1 Data structures

      67
    • 5.2.2 Process creation and destruction

      69
      • 5.2.2.1 Control of child processes

        69
      • 5.2.2.2 DAC controls

        69
        • 5.2.2.2.1 setuid()and setgid()

          69
        • 5.2.2.2.2 seteuid()and setegid()

          69
        • 5.2.2.2.3 setreuid()and setregid()

          69
        • 5.2.2.2.4 setresuid()and setresgid()

          70
      • 5.2.2.3 execve()

        70
      • 5.2.2.4 do_exit()

        70
    • 5.2.3 Process switch

      70
    • 5.2.4 Kernel threads

      70
    • 5.2.5 Scheduling

      71
    • 5.2.6 Kernel preemption

      72
  • 5.3 Inter-process communication

    73
    • 5.3.1 Pipes

      74
      • 5.3.1.1 Data structures and algorithms

        74
    • 5.3.2 First-In First-Out Named pipes

      75
      • 5.3.2.1 FIFO creation

        75
      • 5.3.2.2 FIFO open

        76
    • 5.3.3 System V IPC

      76
      • 5.3.3.1 Common data structures

        76
      • 5.3.3.2 Common functions

        77
        • 5.3.3.2.1 ipc_alloc()

          77
        • 5.3.3.2.2 ipcperms()

          77
      • 5.3.3.3 Message queues

        77
        • 5.3.3.3.1 msg_queue

          77
        • 5.3.3.3.2 msg_msg

          77
        • 5.3.3.3.3 msgget()

          78
        • 5.3.3.3.4 msgsnd()

          78
        • 5.3.3.3.5 msgrcv()

          78
        • 5.3.3.3.6 msgctl()

          78
      • 5.3.3.4 Semaphores

        78
        • 5.3.3.4.1 sem_array

          78
        • 5.3.3.4.2 semget()

          78
        • 5.3.3.4.3 semop()

          78
        • 5.3.3.4.4 semctl()

          79
      • 5.3.3.5 Shared memory regions

        79
        • 5.3.3.5.1 shmid_kernel

          79
        • 5.3.3.5.2 shmget()

          79
        • 5.3.3.5.3 shmat()

          79
        • 5.3.3.5.4 shmdt()

          79
        • 5.3.3.5.5 shmctl()

          79
    • 5.3.4 Signals

      80
      • 5.3.4.1 Data structures

        80
      • 5.3.4.2 Algorithms

        80
    • 5.3.5 Sockets

      80
  • 5.4 Network subsystem

    81
    • 5.4.1 Overview of the network protocol stack

      82
    • 5.4.2 Transport layer protocols

      84
      • 5.4.2.1 TCP

        84
      • 5.4.2.2 UDP

        84
    • 5.4.3 Network layer protocols

      84
      • 5.4.3.1 Internet Protocol Version 4 (IPv4)

        84
      • 5.4.3.2 Internet Protocol Version 6 (IPv6)

        84
        • 5.4.3.2.1 Addressing

          85
        • 5.4.3.2.2 IPv6 Header

          85
        • 5.4.3.2.3 Flow Labels

          86
        • 5.4.3.2.4 Security

          86
      • 5.4.3.3 Transition between IPv4 and IPv6

        86
      • 5.4.3.4 IP Security (IPsec)

        86
        • 5.4.3.4.1 Functional Description of IPsec

          87
          • 5.4.3.4.1.1 AH Protocol (AH)

            87
          • 5.4.3.4.1.2 Encapsulating Security Payload Protocol (ESP)

            88
          • 5.4.3.4.1.3 Security Associations

            89
          • 5.4.3.4.1.4 Security Policy

            89
          • 5.4.3.4.1.5 SA, SP, and Key Management

            89
          • 5.4.3.4.1.6 Internet Key Exchange Protocol (IKE)

            89
          • 5.4.3.4.1.7 Socket API

            89
          • 5.4.3.4.1.8 Cryptographic subsystem

            90
    • 5.4.4 Internet Control Message Protocol (ICMP)

      90
      • 5.4.4.1 Link layer protocols

        90
        • 5.4.4.1.1 Address Resolution Protocol (ARP)

          91
    • 5.4.5 Network services interface

      91
      • 5.4.5.1 socket()

        92
      • 5.4.5.2 bind()

        92
      • 5.4.5.3 listen()

        93
      • 5.4.5.4 accept()

        93
      • 5.4.5.5 connect()

        93
      • 5.4.5.6 Generic calls

        94
      • 5.4.5.7 Access control

        94
  • 5.5 Memory management

    94
    • 5.5.1 Four-Level Page Tables

      96
    • 5.5.2 Memory addressing

      97
      • 5.5.2.1 System x

        97
        • 5.5.2.1.1 Segmentation

          99
        • 5.5.2.1.2 Paging

          100
          • 5.5.2.1.2.1 Paging in the SLES kernel

            102
          • 5.5.2.1.2.2 Access control for control transfers through call gates

            102
          • 5.5.2.1.2.3 Translation lookaside buffers

            103
          • 5.5.2.1.2.4 Address translations in 64-bit mode

            103
          • 5.5.2.1.2.5 Paging in EM64T

            103
      • 5.5.2.2 System p

        104
        • 5.5.2.2.1 Address Translation on LPARs

          108
        • 5.5.2.2.2 Hypervisor

          108
        • 5.5.2.2.3 Real mode addressing

          108
        • 5.5.2.2.4 Virtual mode addressing

          109
        • 5.5.2.2.5 Access to I/O address space

          109
        • 5.5.2.2.6 Direct Memory Access addressing

          109
        • 5.5.2.2.7 Run-Time Abstraction Services

          110
        • 5.5.2.2.8 Preventing denial of service

          110
      • 5.5.2.3 System p native mode

        110
        • 5.5.2.3.1 Machine State Register

          112
        • 5.5.2.3.2 Page descriptor

          113
        • 5.5.2.3.3 Segment descriptor

          113
        • 5.5.2.3.4 Block descriptor

          113
        • 5.5.2.3.5 Address translation mechanisms

          114
        • 5.5.2.3.6 Page Address Translation and access control

          115
      • 5.5.2.4 System z

        118
        • 5.5.2.4.1 Native hardware mode

          118
        • 5.5.2.4.2 LPAR mode

          118
        • 5.5.2.4.3 z/VM Guest mode

          118
        • 5.5.2.4.4 Address types

          118
        • 5.5.2.4.5 Address sizes

          119
        • 5.5.2.4.6 Address spaces

          119
        • 5.5.2.4.7 Address translations

          119
          • 5.5.2.4.7.1 Dynamic address translation

            120
          • 5.5.2.4.7.2 Prefixing

            122
        • 5.5.2.4.8 Memory protection mechanisms

          123
          • 5.5.2.4.8.1 Low-address protection

            123
          • 5.5.2.4.8.2 Page table protection

            124
          • 5.5.2.4.8.3 Key-controlled protection

            127
      • 5.5.2.5 eServer 326

        128
        • 5.5.2.5.1 Logical address

          128
        • 5.5.2.5.2 Effective address

          129
        • 5.5.2.5.3 Linear address

          129
        • 5.5.2.5.4 Physical address

          129
        • 5.5.2.5.5 Segmentation

          129
          • 5.5.2.5.5.1 Access control for data access

            130
          • 5.5.2.5.5.2 Access control for stack segments

            130
          • 5.5.2.5.5.3 Access control for direct control transfer

            130
          • 5.5.2.5.5.4 Access control for control transfers through call gates

            131
          • 5.5.2.5.5.5 Access control through type check

            131
        • 5.5.2.5.6 Paging

          131
        • 5.5.2.5.7 Translation Lookaside Buffers

          135
    • 5.5.3 Kernel memory management

      135
      • 5.5.3.1 Support for NUMA servers

        136
      • 5.5.3.2 Reverse map Virtual Memory

        136
      • 5.5.3.3 Huge Translation Lookaside Buffers

        137
      • 5.5.3.4 Remap_file_pages

        139
      • 5.5.3.5 Page frame management

        139
      • 5.5.3.6 Memory area management

        140
      • 5.5.3.7 Noncontiguous memory area management

        140
    • 5.5.4 Process address space

      140
    • 5.5.5 Symmetric multiprocessing and synchronization

      142
      • 5.5.5.1 Atomic operations

        142
      • 5.5.5.2 Memory barriers

        142
      • 5.5.5.3 Spin locks

        143
      • 5.5.5.4 Kernel semaphores

        143
  • 5.6 Audit subsystem

    143
    • 5.6.1 Audit components

      143
      • 5.6.1.1 Audit kernel components

        144
        • 5.6.1.1.1 Kernel-userspace interface

          144
        • 5.6.1.1.2 Syscall auditing

          145
        • 5.6.1.1.3 Filesystem watches

          145
        • 5.6.1.1.4 Task structure

          145
        • 5.6.1.1.5 Audit context fields

          146
      • 5.6.1.2 File system audit components

        147
      • 5.6.1.3 User space audit components

        148
    • 5.6.2 Audit operation and configuration options

      149
      • 5.6.2.1 Configuration

        149
      • 5.6.2.2 Operation

        151
    • 5.6.3 Audit records

      152
      • 5.6.3.1 Audit record generation

        152
        • 5.6.3.1.1 Kernel record generation

          152
        • 5.6.3.1.2 Syscall audit record generation

          153
          • 5.6.3.1.2.1 System call interface intercept functions

            153
        • 5.6.3.1.3 File system audit record generation

          154
        • 5.6.3.1.4 Socket call and IPC audit record generation

          155
        • 5.6.3.1.5 Record generation by trusted programs

          155
      • 5.6.3.2 Audit record format

        155
    • 5.6.4 Audit tools

      158
      • 5.6.4.1 auditctl

        158
      • 5.6.4.2 ausearch

        158
    • 5.6.5 Login uid association

      158
  • 5.7 Kernel modules

    158
    • 5.7.1 Linux Security Module framework

      159
    • 5.7.2 LSM capabilities module

      161
    • 5.7.3 LSM AppArmor module

      161
  • 5.8 AppArmor

    161
    • 5.8.1 AppArmor administrative utilities

      162
    • 5.8.2 AppArmor access control functions

      163
    • 5.8.3 securityfs

      163
  • 5.9 Device drivers

    164
    • 5.9.1 I/O virtualization on System z

      164
      • 5.9.1.1 Interpretive-execution facility

        164
      • 5.9.1.2 State description

        165
      • 5.9.1.3 Hardware virtualization and simulation

        166
    • 5.9.2 Character device driver

      166
    • 5.9.3 Block device driver

      167
  • 5.10 System initialization

    168
    • 5.10.1 init

      168
    • 5.10.2 System x

      169
      • 5.10.2.1 Boot methods

        170
      • 5.10.2.2 Boot loader

        170
      • 5.10.2.3 Boot process

        170
    • 5.10.3 System p

      173
      • 5.10.3.1 Boot methods

        173
      • 5.10.3.2 Boot loader

        173
      • 5.10.3.3 Boot process

        173
    • 5.10.4 System p in LPAR

      175
      • 5.10.4.1 Boot process

        176
    • 5.10.5 System z

      178
      • 5.10.5.1 Boot methods

        178
      • 5.10.5.2 Control program

        178
      • 5.10.5.3 Boot process

        178
    • 5.10.6 eServer 326

      180
      • 5.10.6.1 Boot methods

        180
      • 5.10.6.2 Boot loader

        181
      • 5.10.6.3 Boot process

        181
  • 5.11 Identification and authentication

    183
    • 5.11.1 Pluggable Authentication Module

      184
      • 5.11.1.1 Overview

        184
      • 5.11.1.2 Configuration terminology

        185
      • 5.11.1.3 Modules

        185
    • 5.11.2 Protected databases

      187
      • 5.11.2.1 Access control rules

        188
        • 5.11.2.1.1 DAC

          188
        • 5.11.2.1.2 Software privilege

          188
    • 5.11.3 Trusted commands and trusted processes

      188
      • 5.11.3.1 agetty

        188
      • 5.11.3.2 gpasswd

        189
      • 5.11.3.3 login

        189
      • 5.11.3.4 mingetty

        190
      • 5.11.3.5 newgrp

        190
      • 5.11.3.6 passwd

        191
      • 5.11.3.7 su

        191
    • 5.11.4 Interaction with audit

      192
  • 5.12 Network applications

    192
    • 5.12.1 OpenSSL Secure socket-layer interface

      192
      • 5.12.1.1 Concepts

        194
        • 5.12.1.1.1 Encryption

          194
          • 5.12.1.1.1.1 Encryption with symmetric keys

            195
          • 5.12.1.1.1.2 Encryption with asymmetric keys

            195
        • 5.12.1.1.2 Message digest

          197
        • 5.12.1.1.3 Message Authentication Code (MAC)

          197
        • 5.12.1.1.4 Digital certificates and certificate authority

          197
      • 5.12.1.2 SSL architecture

        197
        • 5.12.1.2.1 SSL handshake protocol

          198
      • 5.12.1.3 OpenSSL algorithms

        200
      • 5.12.1.4 Symmetric ciphers

        200
        • 5.12.1.4.1 Asymmetric ciphers

          201
        • 5.12.1.4.2 Certificates

          201
        • 5.12.1.4.3 Hash functions

          201
    • 5.12.2 Secure Shell

      202
      • 5.12.2.1 SSH client

        203
      • 5.12.2.2 SSH server daemon

        203
    • 5.12.3 Very Secure File Transfer Protocol daemon

      204
    • 5.12.4 CUPS

      204
      • 5.12.4.1 cupsd

        205
      • 5.12.4.2 ping

        206
      • 5.12.4.3 ping6

        206
      • 5.12.4.4 openssl

        206
      • 5.12.4.5 stunnel

        207
      • 5.12.4.6 xinetd

        208
  • 5.13 System management

    208
    • 5.13.1 Account Management

      208
      • 5.13.1.1 chage

        208
      • 5.13.1.2 chfn

        209
      • 5.13.1.3 chsh

        209
    • 5.13.2 User management

      210
      • 5.13.2.1 useradd

        210
      • 5.13.2.2 usermod

        210
      • 5.13.2.3 userdel

        211
    • 5.13.3 Group management

      212
      • 5.13.3.1 groupadd

        212
      • 5.13.3.2 groupmod

        213
      • 5.13.3.3 groupdel

        213
    • 5.13.4 System Time management

      215
      • 5.13.4.1 date

        215
      • 5.13.4.2 hwclock

        215
    • 5.13.5 Other System Management

      215
      • 5.13.5.1 AMTU

        215
        • 5.13.5.1.1 Memory

          216
        • 5.13.5.1.2 Memory separation

          216
        • 5.13.5.1.3 I/O controller and network

          216
        • 5.13.5.1.4 I/O controller and disk

          216
        • 5.13.5.1.5 Supervisor mode instructions

          216
          • 5.13.5.1.5.1 System p

            217
          • 5.13.5.1.5.2 System z

            217
          • 5.13.5.1.5.3 System x

            217
          • 5.13.5.1.5.4 eServer 326

            218
        • 5.13.5.1.6 AMTU output

          218
      • 5.13.5.2 star

        218
    • 5.13.6 I&A support

      220
      • 5.13.6.1 pam_tally

        220
      • 5.13.6.2 unix_chkpwd

        220
  • 5.14 Batch processing

    220
    • 5.14.1 Batch processing user commands

      220
      • 5.14.1.1 crontab

        220
      • 5.14.1.2 at

        221
    • 5.14.2 Batch processing daemons

      222
      • 5.14.2.1 cron

        222
      • 5.14.2.2 atd

        222
  • 5.15 User-level audit subsystem

    223
    • 5.15.1 Audit daemon

      223
    • 5.15.2 Audit utilities

      223
      • 5.15.2.1 aureport

        223
      • 5.15.2.2 ausearch

        224
      • 5.15.2.3 autrace

        224
    • 5.15.3 Audit configuration files

      224
    • 5.15.4 Audit logs

      224
  • 5.16 Supporting functions

    225
    • 5.16.1 TSF libraries

      225
    • 5.16.2 Library linking mechanism

      227
    • 5.16.3 System call linking mechanism

      227
      • 5.16.3.1 System x

        227
      • 5.16.3.2 System p

        228
      • 5.16.3.3 System z

        228
      • 5.16.3.4 eServer 326

        228
    • 5.16.4 System call argument verification

      228
• 6 Mapping the TOE summary specification to the High-Level Design

  230
  • 6.1 Identification and authentication

    230
    • 6.1.1 User identification and authentication data management (IA.1)

      230
    • 6.1.2 Common authentication mechanism (IA.2)

      230
    • 6.1.3 Interactive login and related mechanisms (IA.3)

      230
    • 6.1.4 User identity changing (IA.4)

      230
    • 6.1.5 Login processing (IA.5)

      230
  • 6.2 Audit

    230
    • 6.2.1 Audit configuration (AU.1)

      230
    • 6.2.2 Audit processing (AU.2)

      230
    • 6.2.3 Audit record format (AU.3)

      231
    • 6.2.4 Audit post-processing (AU.4)

      231
  • 6.3 Discretionary Access Control

    231
    • 6.3.1 General DAC policy (DA.1)

      231
    • 6.3.2 Permission bits (DA.2)

      231
    • 6.3.3 ACLs (DA.3)

      231
    • 6.3.4 DAC: IPC objects (DA.4)

      231
  • 6.4 Object reuse

    231
    • 6.4.1 Object reuse: file system objects (OR.1)

      231
    • 6.4.2 Object reuse: IPC objects (OR.2)

      231
    • 6.4.3 Object reuse: memory objects (OR.3)

      231
  • 6.5 Security management

    231
    • 6.5.1 Roles (SM.1)

      232
    • 6.5.2 Access control configuration and management (SM.2)

      232
    • 6.5.3 Management of user, group and authentication data (SM.3)

      232
    • 6.5.4 Management of audit configuration (SM.4)

      232
    • 6.5.5 Reliable time stamps (SM.5)

      232
  • 6.6 Secure communications

    232
    • 6.6.1 Secure protocols (SC.1)

      232
  • 6.7 TSF protection

    232
    • 6.7.1 TSF invocation guarantees (TP.1)

      232
    • 6.7.2 Kernel (TP.2)

      232
    • 6.7.3 Kernel modules (TP.3)

      232
    • 6.7.4 Trusted processes (TP.4)

      233
    • 6.7.5 TSF Databases (TP.5)

      233
    • 6.7.6 Internal TOE protection mechanisms (TP.6)

      233
    • 6.7.7 Testing the TOE protection mechanisms (TP.7)

      233
  • 6.8 Security enforcing interfaces between subsystems

    233
    • 6.8.1 Summary of kernel subsystem interfaces

      234
      • 6.8.1.1 Kernel subsystem file and I/O

        234
        • 6.8.1.1.1 External Interfaces

          234
        • 6.8.1.1.2 Internal Interfaces

          235
        • 6.8.1.1.4 Data Structures

          236
      • 6.8.1.2 Kernel subsystem process control and management

        236
        • 6.8.1.2.1 External interfaces (system calls)

          236
        • 6.8.1.2.2 Internal Interfaces

          237
        • 6.8.1.2.3 Data Structures

          237
      • 6.8.1.3 Kernel subsystem inter-process communication

        237
        • 6.8.1.3.1 External interfaces (system calls)

          238
        • 6.8.1.3.2 Internal Interfaces

          238
        • 6.8.1.3.3 Data Structures

          238
      • 6.8.1.4 Kernel subsystem networking

        239
        • 6.8.1.4.1 External interfaces (system calls)

          239
        • 6.8.1.4.2 Internal interfaces

          239
        • 6.8.1.4.3 Data Structures

          239
      • 6.8.1.5 Kernel subsystem memory management

        239
        • 6.8.1.5.1 External interfaces (system calls)

          239
        • 6.8.1.5.2 Internal interfaces

          240
        • 6.8.1.5.3 Data Structures

          240
      • 6.8.1.6 Kernel subsystem audit

        240
        • 6.8.1.6.1 External interfaces

          240
        • 6.8.1.6.2 Internal interfaces

          240
        • 6.8.1.6.3 Data structures

          241
      • 6.8.1.7 Kernel subsystem device drivers

        241
        • 6.8.1.7.1 External interfaces (system calls)

          241
        • 6.8.1.7.2 Internal interfaces

          241
          • 6.8.1.7.2.1 Character Devices

            242
          • 6.8.1.7.2.2 Block Devices

            242
        • 6.8.1.7.3 Data structures

          243
      • 6.8.1.8 Kernel subsystems kernel modules

        243
        • 6.8.1.8.1 External interfaces (system calls)

          243
        • 6.8.1.8.2 Internal interfaces

          243
        • 6.8.1.8.3 Data structures

          243
    • 6.8.2 Summary of trusted processes interfaces

      243
• 7 References

  244