* There should be multiple MLS
@ 2014-01-23 2:56 Victor Porton
2014-01-23 3:36 ` Joshua Brindle
0 siblings, 1 reply; 2+ messages in thread
From: Victor Porton @ 2014-01-23 2:56 UTC (permalink / raw)
To: selinux
There should be multiple MLSes:
For example, one MLS for classified documents degrees and yet one MLS for different complexity of software (and qualification of an employee using this software).
--
Victor Porton - http://portonvictor.org
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: There should be multiple MLS
2014-01-23 2:56 There should be multiple MLS Victor Porton
@ 2014-01-23 3:36 ` Joshua Brindle
0 siblings, 0 replies; 2+ messages in thread
From: Joshua Brindle @ 2014-01-23 3:36 UTC (permalink / raw)
To: Victor Porton; +Cc: selinux
Victor Porton wrote:
> There should be multiple MLSes:
>
> For example, one MLS for classified documents degrees and yet one MLS for different complexity of software (and qualification of an employee using this software).
>
MLS is used when there needs to be a hierarchical relationship (i.e.,
classification) but, in general, SELinux uses type enforcement for
integrity and role separation.
For example, various daemons, even running at the same classification,
would have different types (httpd_t, mysql_t, etc) and would be
restricted to only their necessary access.
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2014-01-23 3:36 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2014-01-23 2:56 There should be multiple MLS Victor Porton
2014-01-23 3:36 ` Joshua Brindle
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.