Re: MCS/Targeted Policy...

[Daniel J Walsh <dwalsh@redhat.com>]

Casey Schaufler wrote:

>--- James Morris <jmorris@redhat.com> wrote:
>
>
>  
>
>>They're permissive in comparison with MCS, which
>>does not permit any 
>>further access to objects.
>>    
>>
>
>I'm sorry. I give up. I do not understand
>what you're trying to tell me. I'll have to
>buy you a beer sometime and have you explain
>real slow like. Thanks for the effort.
>
>
>  
>
Let me try.  SELinux does not give any more access then standard DAC 
Controls.  So I would say SELinux is only restrictive  on top of 
Standard DAC.  ACL, however grant additional access over standard DAC, 
so they are permissive
on standard DAC.

>Casey Schaufler
>casey@schaufler-ca.com
>
>__________________________________________________
>Do You Yahoo!?
>Tired of spam?  Yahoo! Mail has the best spam protection around 
>http://mail.yahoo.com 
>  
>


-- 



--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.