Welcome!

Welcome to TOMOYO Linux Wiki!! This is the worldwide Wiki site of TOMOYO Linux. Japanese Wiki is here.

About TOMOYO Linux †

What is TOMOYO Linux? †

TOMOYO Linux is a MAC (Mandatory Access Control) implementation for Linux. It was developed by NTT DATA CORPORATION, Japan and is available under the GPL license. There are two series of TOMOYO Linux.

TOMOYO Linux version 2.x (LSM version) †

LSM (Linux Security Modules) version, currently supporting MAC for file only. It has been merged in Linux kernel version 2.6.30.

TOMOYO Linux version 1.x (original hooks version) †

Version 1.x is a full featured version of MAC. Since this version 1.x does not depend on LSM, it can be used with Linux kernel 2.6 (starting from version 2.6.11) as well as 2.4.

Policy Learning Mode †

TOMOYO Linux has a special mode called "learning" mode. In learning mode, TOMOYO Linux analyzes the accesses occured in the kernel and stores them as MAC policy.

More information here †

TOMOYO Linux Q&A

It's a lot easier to try. †

TOMOYO Linux LiveCD

English mailing-list †

• http://lists.sourceforge.jp/mailman/listinfo/tomoyo-users-en

TOMOYO Linux at SourceForge.jp †

SourceForge.jp: Project Info - TOMOYO

BoF †

TOMOYO Linux had a BoF session at OLS2007.

• TOMOYO Linux BoF

TOMOYO Linux had a presentation and a tutorial session at ELC2007. Presentation materials are available here.

TomoyoLinux - CE Linux Public

TOMOYO Linux 2.x (TOMOYO Linux LSM) †

Overview †

• Using LSM hooks.
• Available in linux-2.6.30 and later.
• Only the functionalities provided by LSM hooks (check here)
• pathname based.
• Policy learning mode.

Documentation †

• Install manual
  • Install on LFS
• Tools documentation
  • Policy editor manual
• Policy specification reference

TOMOYO Linux 1.x †

Overview †

Ready to go powerful (at least we think so) TOMOYO Linux. The latest version is 1.7.1.

• MAC performed by using purposely created hooks.
• 2.4 and 2.6 kernel support.
• full MAC functionalities included (listed here)
• pathname based.
• Packages available for a number of distributions.
• Policy learning mode.
• can coexist without friction with SELinux and AppArmor.

Documentation †

Reference Manual

• Installation guide
• Install via binary package
• Install on LFS
• Policy specification reference
• Tools documentation
  • Policy editor manual

Compatibility note †

Kernel versions †

Patches available for vanilla kernel 2.6 (from 2.6.11 to the latest one) and 2.4 (several versions).

Supported distributions (some binary packages available): †

• RedHat Linux 9
• Fedora Core 3/4/5/6
• Fedora 7/8/9/10/11/12 (install on Fedora 8)
• CentOS 3.9/4.8/5.4 (install on CentOS 4.8, install on CentOS 5.4)
• Debian Sarge/Etch/Lenny (install on Debian Sarge, install on Debian Etch)
• OpenSUSE 10.1/10.2/10.3/11.0/11.1/11.2
• Asianux 2.0/3.0
• Ubuntu 6.10/7.04/7.10/8.04/8.10/9.04/9.10 (install on Ubuntu 8.04)
• Vine Linux 4.2/5.0

Comparison of 1.x and 2.x †

Browse the Code †

• http://tomoyo.sourceforge.jp/cgi-bin/lxr/source

Papers †

Learning Wiki †

• SandBox -- try editting
• InterWikiSandBox -- InterWiki

About PukiWiki †

• PukiWiki -- Introduction of PukiWiki

Document (Japanese) †

• Help -- How to edit
• Text Formatting
• Plugin

Trademarks †

Linux® is a registered trademark of Linus Torvalds in the United States and other countries. TOMOYO® is a registered trademark of NTT DATA CORPORATION.