€•‹9Œsphinx.addnodes”Œdocument”“”)”}”(Œ rawsource”Œ”Œchildren”]”(Œ translations”Œ LanguagesNode”“”)”}”(hhh]”(hŒ pending_xref”“”)”}”(hhh]”Œdocutils.nodes”ŒText”“”ŒChinese (Simplified)”…””}”Œparent”hsbaŒ attributes”}”(Œids”]”Œclasses”]”Œnames”]”Œdupnames”]”Œbackrefs”]”Œ refdomain”Œstd”Œreftype”Œdoc”Œ reftarget”Œ*/translations/zh_CN/admin-guide/LSM/tomoyo”Œmodname”NŒ classname”NŒ refexplicit”ˆuŒtagname”hhh ubh)”}”(hhh]”hŒChinese (Traditional)”…””}”hh2sbah}”(h]”h ]”h"]”h$]”h&]”Œ refdomain”h)Œreftype”h+Œ reftarget”Œ*/translations/zh_TW/admin-guide/LSM/tomoyo”Œmodname”NŒ classname”NŒ refexplicit”ˆuh1hhh ubh)”}”(hhh]”hŒItalian”…””}”hhFsbah}”(h]”h ]”h"]”h$]”h&]”Œ refdomain”h)Œreftype”h+Œ reftarget”Œ*/translations/it_IT/admin-guide/LSM/tomoyo”Œmodname”NŒ classname”NŒ refexplicit”ˆuh1hhh ubh)”}”(hhh]”hŒJapanese”…””}”hhZsbah}”(h]”h ]”h"]”h$]”h&]”Œ refdomain”h)Œreftype”h+Œ reftarget”Œ*/translations/ja_JP/admin-guide/LSM/tomoyo”Œmodname”NŒ classname”NŒ refexplicit”ˆuh1hhh ubh)”}”(hhh]”hŒKorean”…””}”hhnsbah}”(h]”h ]”h"]”h$]”h&]”Œ refdomain”h)Œreftype”h+Œ reftarget”Œ*/translations/ko_KR/admin-guide/LSM/tomoyo”Œmodname”NŒ classname”NŒ refexplicit”ˆuh1hhh ubh)”}”(hhh]”hŒPortuguese (Brazilian)”…””}”hh‚sbah}”(h]”h ]”h"]”h$]”h&]”Œ refdomain”h)Œreftype”h+Œ reftarget”Œ*/translations/pt_BR/admin-guide/LSM/tomoyo”Œmodname”NŒ classname”NŒ refexplicit”ˆuh1hhh ubh)”}”(hhh]”hŒSpanish”…””}”hh–sbah}”(h]”h ]”h"]”h$]”h&]”Œ refdomain”h)Œreftype”h+Œ reftarget”Œ*/translations/sp_SP/admin-guide/LSM/tomoyo”Œmodname”NŒ classname”NŒ refexplicit”ˆuh1hhh ubeh}”(h]”h ]”h"]”h$]”h&]”Œcurrent_language”ŒEnglish”uh1h hhŒ _document”hŒsource”NŒline”NubhŒsection”“”)”}”(hhh]”(hŒtitle”“”)”}”(hŒTOMOYO”h]”hŒTOMOYO”…””}”(hh¼h²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hºhh·h²hh³ŒD/var/lib/git/docbuild/linux/Documentation/admin-guide/LSM/tomoyo.rst”h´Kubh¶)”}”(hhh]”(h»)”}”(hŒWhat is TOMOYO?”h]”hŒWhat is TOMOYO?”…””}”(hhÎh²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hºhhËh²hh³hÊh´KubhŒ paragraph”“”)”}”(hŒGTOMOYO is a name-based MAC extension (LSM module) for the Linux kernel.”h]”hŒGTOMOYO is a name-based MAC extension (LSM module) for the Linux kernel.”…””}”(hhÞh²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hÜh³hÊh´KhhËh²hubhÝ)”}”(hŒ'LiveCD-based tutorials are available at”h]”hŒ'LiveCD-based tutorials are available at”…””}”(hhìh²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hÜh³hÊh´K hhËh²hubhÝ)”}”(hŒmhttps://tomoyo.sourceforge.net/1.8/ubuntu12.04-live.html https://tomoyo.sourceforge.net/1.8/centos6-live.html”h]”(hŒ reference”“”)”}”(hŒ8https://tomoyo.sourceforge.net/1.8/ubuntu12.04-live.html”h]”hŒ8https://tomoyo.sourceforge.net/1.8/ubuntu12.04-live.html”…””}”(hjh²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”Œrefuri”juh1hþhhúubhŒ ”…””}”(hhúh²hh³Nh´Nubhÿ)”}”(hŒ4https://tomoyo.sourceforge.net/1.8/centos6-live.html”h]”hŒ4https://tomoyo.sourceforge.net/1.8/centos6-live.html”…””}”(hjh²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”Œrefuri”juh1hþhhúubeh}”(h]”h ]”h"]”h$]”h&]”uh1hÜh³hÊh´K hhËh²hubhÝ)”}”(hŒeThough these tutorials use non-LSM version of TOMOYO, they are useful for you to know what TOMOYO is.”h]”hŒeThough these tutorials use non-LSM version of TOMOYO, they are useful for you to know what TOMOYO is.”…””}”(hj(h²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hÜh³hÊh´KhhËh²hubeh}”(h]”Œwhat-is-tomoyo”ah ]”h"]”Œwhat is tomoyo?”ah$]”h&]”uh1hµhh·h²hh³hÊh´Kubh¶)”}”(hhh]”(h»)”}”(hŒHow to enable TOMOYO?”h]”hŒHow to enable TOMOYO?”…””}”(hjAh²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hºhj>h²hh³hÊh´KubhÝ)”}”(hŒiBuild the kernel with ``CONFIG_SECURITY_TOMOYO=y`` and pass ``security=tomoyo`` on kernel's command line.”h]”(hŒBuild the kernel with ”…””}”(hjOh²hh³Nh´NubhŒliteral”“”)”}”(hŒ``CONFIG_SECURITY_TOMOYO=y``”h]”hŒCONFIG_SECURITY_TOMOYO=y”…””}”(hjYh²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1jWhjOubhŒ and pass ”…””}”(hjOh²hh³Nh´NubjX)”}”(hŒ``security=tomoyo``”h]”hŒsecurity=tomoyo”…””}”(hjkh²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1jWhjOubhŒ on kernel’s command line.”…””}”(hjOh²hh³Nh´Nubeh}”(h]”h ]”h"]”h$]”h&]”uh1hÜh³hÊh´Khj>h²hubhÝ)”}”(hŒ;Please see https://tomoyo.sourceforge.net/2.6/ for details.”h]”(hŒ Please see ”…””}”(hjƒh²hh³Nh´Nubhÿ)”}”(hŒ#https://tomoyo.sourceforge.net/2.6/”h]”hŒ#https://tomoyo.sourceforge.net/2.6/”…””}”(hj‹h²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”Œrefuri”juh1hþhjƒubhŒ for details.”…””}”(hjƒh²hh³Nh´Nubeh}”(h]”h ]”h"]”h$]”h&]”uh1hÜh³hÊh´Khj>h²hubeh}”(h]”Œhow-to-enable-tomoyo”ah ]”h"]”Œhow to enable tomoyo?”ah$]”h&]”uh1hµhh·h²hh³hÊh´Kubh¶)”}”(hhh]”(h»)”}”(hŒWhere is documentation?”h]”hŒWhere is documentation?”…””}”(hj¯h²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hºhj¬h²hh³hÊh´KubhÝ)”}”(hŒ|User <-> Kernel interface documentation is available at https://tomoyo.sourceforge.net/2.6/policy-specification/index.html .”h]”(hŒ8User <-> Kernel interface documentation is available at ”…””}”(hj½h²hh³Nh´Nubhÿ)”}”(hŒBhttps://tomoyo.sourceforge.net/2.6/policy-specification/index.html”h]”hŒBhttps://tomoyo.sourceforge.net/2.6/policy-specification/index.html”…””}”(hjÅh²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”Œrefuri”jÇuh1hþhj½ubhŒ .”…””}”(hj½h²hh³Nh´Nubeh}”(h]”h ]”h"]”h$]”h&]”uh1hÜh³hÊh´Khj¬h²hubhÝ)”}”(hŒ£Materials we prepared for seminars and symposiums are available at https://sourceforge.net/projects/tomoyo/files/docs/ . Below lists are chosen from three aspects.”h]”(hŒCMaterials we prepared for seminars and symposiums are available at ”…””}”(hjÞh²hh³Nh´Nubhÿ)”}”(hŒ3https://sourceforge.net/projects/tomoyo/files/docs/”h]”hŒ3https://sourceforge.net/projects/tomoyo/files/docs/”…””}”(hjæh²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”Œrefuri”jèuh1hþhjÞubhŒ- . Below lists are chosen from three aspects.”…””}”(hjÞh²hh³Nh´Nubeh}”(h]”h ]”h"]”h$]”h&]”uh1hÜh³hÊh´K hj¬h²hubhŒdefinition_list”“”)”}”(hhh]”(hŒdefinition_list_item”“”)”}”(hX–What is TOMOYO? TOMOYO Linux Overview https://sourceforge.net/projects/tomoyo/files/docs/lca2009-takeda.pdf TOMOYO Linux: pragmatic and manageable security for Linux https://sourceforge.net/projects/tomoyo/files/docs/freedomhectaipei-tomoyo.pdf TOMOYO Linux: A Practical Method to Understand and Protect Your Own Linux Box https://sourceforge.net/projects/tomoyo/files/docs/PacSec2007-en-no-demo.pdf ”h]”(hŒterm”“”)”}”(hŒWhat is TOMOYO?”h]”hŒWhat is TOMOYO?”…””}”(hj h²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1j h³hÊh´K*hjubhŒ definition”“”)”}”(hhh]”j)”}”(hhh]”(j)”}”(hŒ[TOMOYO Linux Overview https://sourceforge.net/projects/tomoyo/files/docs/lca2009-takeda.pdf”h]”(j )”}”(hŒTOMOYO Linux Overview”h]”hŒTOMOYO Linux Overview”…””}”(hj&h²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1j h³hÊh´K%hj"ubj)”}”(hhh]”hÝ)”}”(hŒEhttps://sourceforge.net/projects/tomoyo/files/docs/lca2009-takeda.pdf”h]”hÿ)”}”(hj9h]”hŒEhttps://sourceforge.net/projects/tomoyo/files/docs/lca2009-takeda.pdf”…””}”(hj;h²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”Œrefuri”j9uh1hþhj7ubah}”(h]”h ]”h"]”h$]”h&]”uh1hÜh³hÊh´K&hj4ubah}”(h]”h ]”h"]”h$]”h&]”uh1jhj"ubeh}”(h]”h ]”h"]”h$]”h&]”uh1jh³hÊh´K%hjubj)”}”(hŒˆTOMOYO Linux: pragmatic and manageable security for Linux https://sourceforge.net/projects/tomoyo/files/docs/freedomhectaipei-tomoyo.pdf”h]”(j )”}”(hŒ9TOMOYO Linux: pragmatic and manageable security for Linux”h]”hŒ9TOMOYO Linux: pragmatic and manageable security for Linux”…””}”(hj_h²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1j h³hÊh´K'hj[ubj)”}”(hhh]”hÝ)”}”(hŒNhttps://sourceforge.net/projects/tomoyo/files/docs/freedomhectaipei-tomoyo.pdf”h]”hÿ)”}”(hjrh]”hŒNhttps://sourceforge.net/projects/tomoyo/files/docs/freedomhectaipei-tomoyo.pdf”…””}”(hjth²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”Œrefuri”jruh1hþhjpubah}”(h]”h ]”h"]”h$]”h&]”uh1hÜh³hÊh´K(hjmubah}”(h]”h ]”h"]”h$]”h&]”uh1jhj[ubeh}”(h]”h ]”h"]”h$]”h&]”uh1jh³hÊh´K'hjubj)”}”(hŒ›TOMOYO Linux: A Practical Method to Understand and Protect Your Own Linux Box https://sourceforge.net/projects/tomoyo/files/docs/PacSec2007-en-no-demo.pdf ”h]”(j )”}”(hŒMTOMOYO Linux: A Practical Method to Understand and Protect Your Own Linux Box”h]”hŒMTOMOYO Linux: A Practical Method to Understand and Protect Your Own Linux Box”…””}”(hj˜h²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1j h³hÊh´K*hj”ubj)”}”(hhh]”hÝ)”}”(hŒLhttps://sourceforge.net/projects/tomoyo/files/docs/PacSec2007-en-no-demo.pdf”h]”hÿ)”}”(hj«h]”hŒLhttps://sourceforge.net/projects/tomoyo/files/docs/PacSec2007-en-no-demo.pdf”…””}”(hj­h²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”Œrefuri”j«uh1hþhj©ubah}”(h]”h ]”h"]”h$]”h&]”uh1hÜh³hÊh´K*hj¦ubah}”(h]”h ]”h"]”h$]”h&]”uh1jhj”ubeh}”(h]”h ]”h"]”h$]”h&]”uh1jh³hÊh´K*hjubeh}”(h]”h ]”h"]”h$]”h&]”uh1jÿhjubah}”(h]”h ]”h"]”h$]”h&]”uh1jhjubeh}”(h]”h ]”h"]”h$]”h&]”uh1jh³hÊh´K*hjubj)”}”(hŒõWhat can TOMOYO do? Deep inside TOMOYO Linux https://sourceforge.net/projects/tomoyo/files/docs/lca2009-kumaneko.pdf The role of "pathname based access control" in security. https://sourceforge.net/projects/tomoyo/files/docs/lfj2008-bof.pdf ”h]”(j )”}”(hŒWhat can TOMOYO do?”h]”hŒWhat can TOMOYO do?”…””}”(hjãh²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1j h³hÊh´K0hjßubj)”}”(hhh]”j)”}”(hhh]”(j)”}”(hŒ`Deep inside TOMOYO Linux https://sourceforge.net/projects/tomoyo/files/docs/lca2009-kumaneko.pdf”h]”(j )”}”(hŒDeep inside TOMOYO Linux”h]”hŒDeep inside TOMOYO Linux”…””}”(hjûh²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1j h³hÊh´K-hj÷ubj)”}”(hhh]”hÝ)”}”(hŒGhttps://sourceforge.net/projects/tomoyo/files/docs/lca2009-kumaneko.pdf”h]”hÿ)”}”(hjh]”hŒGhttps://sourceforge.net/projects/tomoyo/files/docs/lca2009-kumaneko.pdf”…””}”(hjh²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”Œrefuri”juh1hþhj ubah}”(h]”h ]”h"]”h$]”h&]”uh1hÜh³hÊh´K.hj ubah}”(h]”h ]”h"]”h$]”h&]”uh1jhj÷ubeh}”(h]”h ]”h"]”h$]”h&]”uh1jh³hÊh´K-hjôubj)”}”(hŒ|The role of "pathname based access control" in security. https://sourceforge.net/projects/tomoyo/files/docs/lfj2008-bof.pdf ”h]”(j )”}”(hŒ8The role of "pathname based access control" in security.”h]”hŒhttps://sourceforge.net/projects/tomoyo/files/docs/lfj2008.pdf”h]”hÿ)”}”(hjªh]”hŒ>https://sourceforge.net/projects/tomoyo/files/docs/lfj2008.pdf”…””}”(hj¬h²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”Œrefuri”jªuh1hþhj¨ubah}”(h]”h ]”h"]”h$]”h&]”uh1hÜh³hÊh´K4hj¥ubah}”(h]”h ]”h"]”h$]”h&]”uh1jhj“ubeh}”(h]”h ]”h"]”h$]”h&]”uh1jh³hÊh´K3hjubah}”(h]”h ]”h"]”h$]”h&]”uh1jÿhjubah}”(h]”h ]”h"]”h$]”h&]”uh1jhj{ubeh}”(h]”h ]”h"]”h$]”h&]”uh1jh³hÊh´K3hjh²hubeh}”(h]”h ]”h"]”h$]”h&]”uh1jÿhj¬h²hh³Nh´Nubeh}”(h]”Œwhere-is-documentation”ah ]”h"]”Œwhere is documentation?”ah$]”h&]”uh1hµhh·h²hh³hÊh´Kubeh}”(h]”Œtomoyo”ah ]”h"]”Œtomoyo”ah$]”h&]”uh1hµhhh²hh³hÊh´Kubeh}”(h]”h ]”h"]”h$]”h&]”Œsource”hÊuh1hŒcurrent_source”NŒ current_line”NŒsettings”Œdocutils.frontend”ŒValues”“”)”}”(hºNŒ generator”NŒ datestamp”NŒ source_link”NŒ source_url”NŒ toc_backlinks”Œentry”Œfootnote_backlinks”KŒ sectnum_xform”KŒstrip_comments”NŒstrip_elements_with_classes”NŒ strip_classes”NŒ report_level”KŒ halt_level”KŒexit_status_level”KŒdebug”NŒwarning_stream”NŒ traceback”ˆŒinput_encoding”Œ utf-8-sig”Œinput_encoding_error_handler”Œstrict”Œoutput_encoding”Œutf-8”Œoutput_encoding_error_handler”jŒerror_encoding”Œutf-8”Œerror_encoding_error_handler”Œbackslashreplace”Œ language_code”Œen”Œrecord_dependencies”NŒconfig”NŒ id_prefix”hŒauto_id_prefix”Œid”Œ dump_settings”NŒdump_internals”NŒdump_transforms”NŒdump_pseudo_xml”NŒexpose_internals”NŒstrict_visitor”NŒ_disable_config”NŒ_source”hÊŒ _destination”NŒ _config_files”]”Œ7/var/lib/git/docbuild/linux/Documentation/docutils.conf”aŒfile_insertion_enabled”ˆŒ raw_enabled”KŒline_length_limit”M'Œpep_references”NŒ pep_base_url”Œhttps://peps.python.org/”Œpep_file_url_template”Œpep-%04d”Œrfc_references”NŒ rfc_base_url”Œ&https://datatracker.ietf.org/doc/html/”Œ tab_width”KŒtrim_footnote_reference_space”‰Œsyntax_highlight”Œlong”Œ smart_quotes”ˆŒsmartquotes_locales”]”Œcharacter_level_inline_markup”‰Œdoctitle_xform”‰Œ docinfo_xform”KŒsectsubtitle_xform”‰Œ image_loading”Œlink”Œembed_stylesheet”‰Œcloak_email_addresses”ˆŒsection_self_link”‰Œenv”NubŒreporter”NŒindirect_targets”]”Œsubstitution_defs”}”Œsubstitution_names”}”Œrefnames”}”Œrefids”}”Œnameids”}”(jñjîj;j8j©j¦jéjæuŒ nametypes”}”(jñ‰j;‰j©‰jé‰uh}”(jîh·j8hËj¦j>jæj¬uŒ footnote_refs”}”Œ citation_refs”}”Œ autofootnotes”]”Œautofootnote_refs”]”Œsymbol_footnotes”]”Œsymbol_footnote_refs”]”Œ footnotes”]”Œ citations”]”Œautofootnote_start”KŒsymbol_footnote_start”KŒ id_counter”Œ collections”ŒCounter”“”}”…”R”Œparse_messages”]”Œtransform_messages”]”Œ transformer”NŒ include_log”]”Œ decoration”Nh²hub.