A security module for system analysis and protection

AKARI is a Mandatory Access Control (MAC) implementation for Linux that can be used to increase the security of a system, while also being useful purely as a system analysis tool. It is a Linux kernel module based on TOMOYO Linux, which was launched in March 2003.

AKARI focuses on the behaviour of a system. Every process is created to achieve a purpose, and like an immigration officer, AKARI allows each process to declare behaviours and resources needed to achieve their purpose. When protection is enabled, AKARI acts like an operation watchdog, restricting each process to only the behaviours and resources allowed by the administrator.

The main features of AKARI include:

• System analysis
• Increased security through Mandatory Access Control
• Tools to aid in policy generation
• Simple syntax
• Easy to use
• Very few dependencies
• Requires no modification of existing binaries

Find out more on our About Page!