Linux Security Modules API

E193776

Linux kernel security framework application programming interface

The Linux Security Modules API is a kernel-level framework in Linux that allows the implementation of pluggable security policies and access control mechanisms such as AppArmor and SELinux.

Try in SPARQL Jump to: Surface forms Disambiguation Statements Elicitation Referenced by

All labels observed (7)

Label	Occurrences
Linux Security Modules framework	3
Linux Security Modules API canonical	2
LSM (Linux Security Modules)	1
Linux Security Modules	1
Linux Security Modules Application Programming Interface	1
Linux kernel security subsystem contributions	1
Linux security modules	1

How this entity was disambiguated

This entity first appeared as the object of triple T1718413 — resolving that mention is where its identity was fixed. The disambiguator weighed these candidate entities and picked the highlighted one (or “None”, minting a new entity). This is how homonymy is resolved: the same surface form can point to different entities.

NED1 Entity disambiguation (via context triple) gpt-5-mini-2025-08-07

Target entity: Linux Security Modules API
Context triple: [AppArmor, implements, Linux Security Modules API]

A. SELinux
SELinux (Security-Enhanced Linux) is a Linux kernel security module that provides a flexible, fine-grained mandatory access control (MAC) framework to enforce strict security policies on systems.
B. Trusted Platform Module 2.0
Trusted Platform Module 2.0 is a hardware-based security chip standard that provides cryptographic functions and secure key storage to enhance system integrity and protection against tampering.
C. AppArmor
AppArmor is a Linux kernel security module that confines programs to a limited set of resources using per-application security profiles to reduce the impact of vulnerabilities and attacks.
D. Encrypting File System
Encrypting File System is a Windows feature that provides transparent file-level encryption to protect data stored on NTFS volumes.
E. TrustZone security extension
TrustZone security extension is ARM's hardware-based security technology that creates isolated execution environments to protect sensitive code and data on system-on-chip devices.
F. None of above. chosen
G. Unsure - the case is ambiguous/there is not enough information to decide.

NED2 Entity disambiguation (via description) gpt-5-mini-2025-08-07

Target entity: Linux Security Modules API
Target entity description: The Linux Security Modules API is a kernel-level framework in Linux that allows the implementation of pluggable security policies and access control mechanisms such as AppArmor and SELinux.

A. SELinux
SELinux (Security-Enhanced Linux) is a Linux kernel security module that provides a flexible, fine-grained mandatory access control (MAC) framework to enforce strict security policies on systems.
B. Trusted Platform Module 2.0
Trusted Platform Module 2.0 is a hardware-based security chip standard that provides cryptographic functions and secure key storage to enhance system integrity and protection against tampering.
C. AppArmor
AppArmor is a Linux kernel security module that confines programs to a limited set of resources using per-application security profiles to reduce the impact of vulnerabilities and attacks.
D. Encrypting File System
Encrypting File System is a Windows feature that provides transparent file-level encryption to protect data stored on NTFS volumes.
E. TrustZone security extension
TrustZone security extension is ARM's hardware-based security technology that creates isolated execution environments to protect sensitive code and data on system-on-chip devices.
F. None of above. chosen

Statements (45)

Predicate	Object
instanceOf	Linux kernel security framework ⓘ application programming interface ⓘ
aimsTo	avoid hard-coding a single security policy in the kernel ⓘ provide a general framework for security enhancements ⓘ
allows	stacking of certain security modules ⓘ
alsoKnownAs	LSM API ⓘ
category	Linux security ⓘ computer security framework ⓘ
controls	access to IPC objects ⓘ access to files ⓘ access to sockets ⓘ kernel object labeling ⓘ network operations ⓘ task and process operations ⓘ
designedFor	extensibility of Linux security model ⓘ supporting multiple concurrent security modules ⓘ
documentedIn	Linux kernel documentation ⓘ
enables	loadable security modules ⓘ separation of security policy from core kernel logic ⓘ
governedBy	Linux kernel community ⓘ
hasComponent	security blobs for kernel objects ⓘ security hooks ⓘ security operations structures ⓘ
implementedIn	C ⓘ
influenced	design of security modules such as SELinux ⓘ
introducedIn	Linux 2.6 series ⓘ linked to: Linux kernel
maintainedAs	part of mainline Linux kernel source tree ⓘ
operatesAt	kernel level ⓘ
partOf	Linux kernel ⓘ
provides	interfaces for security modules to enforce policies ⓘ security hooks in kernel code paths ⓘ
relatedTo	Linux namespaces ⓘ linked to: Linux containers POSIX capabilities ⓘ cgroups ⓘ
runsOn	Linux ⓘ
supports	pluggable access control mechanisms ⓘ pluggable security policies ⓘ
supportsModel	capability-based security ⓘ discretionary access control ⓘ mandatory access control ⓘ
usedBy	AppArmor ⓘ SELinux ⓘ Smack ⓘ TOMOYO Linux ⓘ Yama ⓘ

How these facts were elicited