The first NetAuth implementation has been integrated into the Linux kernel. Our implementation has three key components:
The LSM framework segregates the placement of hooks (scattered through the Linux kernel) from the enforcement of access controls (centralized in an LSM module). Thus changes in the mainline kernel (mostly) do not affect LSM modules.
The kernel implementation currently consists of about 3,700 lines of C code (3,000 (approx.) in the kernel module and 700 (approx.) in the kernel extensions).