Re: AppArmor FAQ

Casey Schaufler
2007-04-18T13:31:39Z

--- Joshua Brindle <jbrindle@tresys.com> wrote:

> Biba and BLP are only incompatible if they are using the same label, if
> each object has a confidentiality and integrity label they work fine
> together

Joshua is correct here, although the original Biba observation was
that flipping BLP upside down results in an integrity model. Trusted
Irix uses (used?) both Biba and BLP.

> (as well as MLS systems work in general that is).

Doh! He had to get the dig in.

Casey Schaufler
casey@schaufler-ca.com