Skip to content

Architecture

Hramchenko edited this page Oct 5, 2011 · 1 revision

User Data Defence consist of five components: UDDBus, UDDaemon, UDDTray, UDDExec and UDDPolicy.

UDDBus

UDDBus is auditd interaction utility. It reads from the input stream of audit events daemon, filters AVC messages from stream and transmits them via D-Bus Service to UDDaemon (this utility is based on code of sedispatch, written by D. Walsh).

UDDaemon

UDDaemon is a daemon of SELinux messages. Daemon receives data from UDDBus, accumulates it and provides a data storage. It sends information about new security events to UDDTray in a real time.

UDDTray

UDDTray is a userland component of User Data Defence. It is a graphical application which running in the system tray. UDDTray performs SELinux alerts through the system notification service KNotify. It provides an interface of controlling modes of access control system.

UDDExec

UDDExec is an application launcher utility. It selects the calling program in depending on the mode selected in UDDTray. This utility provide you an opportunity to specify a security policy for individual applications, depending on the type of information which need to be processed.

UDDPolicy

UDDPolicy is a set of SELinux policy templates for applications with graphical user interface. It provides new macro functions which helps in rapid policy development.

Clone this wiki locally