Hello. I wrote a LSM module which is implemented as a loadable kernel module which emits TOMOYO-like information into the audit logs rather than SELinux's context, and added it to http://sourceforge.jp/projects/akari/scm/svn/tree/head/branches/tasktracker/ . By using this module, you can obtain information similar to TOMOYO by configuring via auditctl command. This module will be lightweight because this module does not make security decision. Regards.
TOMOYO
Fork