From: Joshua Brindle <brindle@quarksecurity.com>
To: Victor Porton <porton@narod.ru>
Cc: selinux@tycho.nsa.gov
Subject: Re: There should be multiple MLS
Date: Wed, 22 Jan 2014 22:36:35 -0500 [thread overview]
Message-ID: <52E08E43.1000109@quarksecurity.com> (raw)
In-Reply-To: <363761390445810@web24h.yandex.ru>
Victor Porton wrote:
> There should be multiple MLSes:
>
> For example, one MLS for classified documents degrees and yet one MLS for different complexity of software (and qualification of an employee using this software).
>
MLS is used when there needs to be a hierarchical relationship (i.e.,
classification) but, in general, SELinux uses type enforcement for
integrity and role separation.
For example, various daemons, even running at the same classification,
would have different types (httpd_t, mysql_t, etc) and would be
restricted to only their necessary access.
prev parent reply other threads:[~2014-01-23 3:36 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2014-01-23 2:56 There should be multiple MLS Victor Porton
2014-01-23 3:36 ` Joshua Brindle [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=52E08E43.1000109@quarksecurity.com \
--to=brindle@quarksecurity.com \
--cc=porton@narod.ru \
--cc=selinux@tycho.nsa.gov \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.