Re: SELinux project

[kamal <kamalnee@iitk.ac.in>]

Thanks a lot for the suggestions!
Our interest related to integrity is slightly different. SELinux seems 
to take good care of the security of the system. But consider a military 
environment and think about actual users. A high ranking officer has got 
lots of documents from juniors and his boss, some of them possibly 
copied from their directories, and some sent through email. Now all the 
documents should not appear same to him, there should be an easy 
classification based on integrity and confidentiality of a document. He 
should not unknowingly be able to move information in a way that 
violates Biba and BLP constraints. We also want to see how digital 
signatures and encryption can be tightly and transparently integrated 
with this, e.g. in assigning integrity level to an incoming email 
attachment.
Another thing in our mind is decentralization of users' 
confidentiality/integrity levels. I mean putting this policy on some 
central server. After all, users don't belong to a computer, they belong 
to an organization. Decentralizing parts of general TE policy seems more 
difficult, levels seem easier to handle.
I wonder whether all this makes sense. Does it?


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.