詳細介紹了嵌入式L inux 編譯環境的架構, 討論了如何在L inux2. 4 環境下實現IP 安全協議, 實現數據安全傳輸, 通過利用L inux 實現防火墻所提供的5 個鉤子函數掛載點, 將安全模塊嵌入到L inux 系統中, 從而完成L inux2. 4 對于IP 安全協議的支持. 測試結果表明: 這種方式完全能夠實現L inux 對IP 安全協議的支持, 很好地實現數據安全傳輸.
關鍵詞　嵌入式L inux; 安全協議; 防火墻; 鉤子函數Abstract　Th is paper int roduces how to build the environment of embedded L inux comp lier and how to imp lement
IP security in o rder to keep data′s t ransit ion safety on L inux2. 4. It p ropo ses to use five hook funct ions of netfilter to embed our IP security modules into L inux operat ion system. The result of test show that L inux can friendly suppo rt the IP security to finish data′s safety t ransit ion.
Keywords　embedded L inux; IP sec; netfilter; hook funct ion
Tian Yuchuan　M aster′s Candidate , Co llege of Computer Science , SCU FN , W uhan 430074,Ch ina