A security module for system analysis and protection
AKARI is a Mandatory Access Control (MAC) implementation for Linux that can be used to increase the security of a system, while also being useful purely as a system analysis tool. It is a Linux kernel module based on TOMOYO Linux, which was launched in March 2003.
AKARI focuses on the behaviour of a system. Every process is created to achieve a purpose, and like an immigration officer, AKARI allows each process to declare behaviours and resources needed to achieve their purpose. When protection is enabled, AKARI acts like an operation watchdog, restricting each process to only the behaviours and resources allowed by the administrator.
The main features of AKARI include:
- System analysis
- Increased security through Mandatory Access Control
- Tools to aid in policy generation
- Simple syntax
- Easy to use
- Very few dependencies
- Requires no modification of existing binaries
Find out more on our About Page!
News
AKARI 1.0.27 released
A new version of AKARI accommodates support for any RHEL 4/5/6 kernels.
AKARI 1.0.26 released
A new version of AKARI accommodates build failure caused by changes between Linux 3.3 and Linux 3.4-rc1.
AKARI 1.0.25 released
A new version of AKARI accommodates changes to the redefinition of UMH_WAIT_PROC constant which is scheduled for Linux 3.4-rc1 kernel. This redefinition may be backported to 2.6.23 and later kernels. Affected kernels must upgrade to this version of AKARI.
AKARI 1.0.24 released
A new version of AKARI accommodates changes to the behaviour of __d_path() in recent kernels. This new behaviour was introduced in Linux 3.2-rc5 but may be backported to 2.6.36 and later kernels. Affected kernels must upgrade to this version of AKARI.
Website and documentation update
Both our website and documentation have been given a major revamp! We hope that you like the new design, and find the documentation informative and easy to read. If you have any comments, please send an email to our Mailing List.