Re: [saag] Common labeled security (comment on CALIPSO, labeled NFSv4)

[Nicolas Williams <Nicolas.Williams@sun.com>]

On Sat, Apr 04, 2009 at 09:28:02PM -0400, Sean Turner wrote:
> I usually try to find the corresponding ITU spec because I think ITU 
> gives out all of it's ASN.1 modules freely?  Anyway, here's a link to 
> the ITU-T X.841 Spec:
> http://www.itu.int/ITU-T/asn1/database/itu-t/x/x841/2000/index.html

Thanks.  I'm sure the spec needs to be read too, not just the ASN.1
module (it's mostly self-evident, but some types, like
LabelAndCertValue, require an explanation).

> The one thing that's missing from the module is definitions for security 
> categories.  Some suggested categories were defined in Annex B, but it's 
> an informative annex so there's no ASN.1 freely available (they wouldn't 
> allow them in the normative text/module).  Those categories are based on 
> FIPS 188 (the syntax is not the same).
> 
> Note that some of the syntax for labels has made it's way to some 
> IDs/RFCs notably RFC 2634.

Thanks.  That's very useful.

Nico
-- 

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.