Re: [RFC] clarifications for -l to newrole.1

[Casey Schaufler <casey@schaufler-ca.com>]

--- Joe Nall <joe@nall.com> wrote:


> On HP-UX 10.26, normal users can login at syslo,
> which in our systems  
> corresponds to unclassified.

Hmm.

> There is no special effort made to use  
> MLS to protect the TCB (some files are syshi because
> of their contents).

Hmm.

> Does Trusted Irix use a distinct level or
> an implicit bit in the non SystemLow labels?

Trix labels are "sophisticated". They include
both sensitivity (MSEN) and integrity (MINT)
components. A sensitivity can be MSEN_LOW
(SystemLow) MSEN_HIGH (SystemHigh), MSEN_ADMIN
(/etc/shadow), MSEN_TCSEC (with levels and
categories), or a couple other special types.
All TCB data is either MSEN_LOW or MSEN_ADMIN.
Users get MSEN_TCSEC labels, which can have
a level 0-255 and a set of categories.
MSEN_TCSEC labels dominate MSEN_LOW.

MINT is also used, with TCB data getting
MINT_HIGH labels and users getting MINT_BIBA.

In retrospect Trix labels are more complicated
than they need to be. I'm looking into a better
way for my "next" system.


Casey Schaufler
casey@schaufler-ca.com

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.