Notes I presented this paper at the 2003 Ottawa Linux Symposium (OLS). http://lsm.immunix.org/ is defunct, since about 2004, so I removed the link. The NSA changed the URLs on their web site, so this version of the paper has the new ones. The SE Linux kernel interfaces have changed, now it’s all through the proc