Security configuration (security.cfg)

The security.cfg file is called a security configuration description or simply security configuration. This file describes the rules for interaction between entities, the rules for their startup and queries via the security interface, and the utilized audit profile.

The security module (ksm.module) is built based on security.cfg. This is done by using the specialized makekss script supplied with KasperskyOS Starter Kit. In addition to the security.cfg file, the files containing static descriptions of all entities, components and interfaces in the solution are required for building the module. The built module is named ksm.module.

To include the security module into the solution image, the module name must be specified in the makeimg script parameters.

If a solution image is built without a security module, the interactions will not be controlled, i.e. all interactions will be allowed.

In this section

Structure of the security.cfg file

Linking events to policies

Call policies and attr policies

Example of a minimum security configuration

Page top