The security.cfg
file is called a security configuration description or simply security configuration. This file describes the rules for interaction between entities, the rules for their startup and queries via the security interface, and the utilized audit profile.
The security module (ksm.module
) is built based on security.cfg
. This is done by using the specialized makekss
script supplied with KasperskyOS Starter Kit. In addition to the security.cfg
file, the files containing static descriptions of all entities, components and interfaces in the solution are required for building the module. The built module is named ksm.module
.
To include the security module into the solution image, the module name must be specified in the makeimg
script parameters.
If a solution image is built without a security module, the interactions will not be controlled, i.e. all interactions will be allowed.