From: Casey Schaufler <casey_at_schaufler-ca.com>
Date: Mon, 24 Jan 2005 08:38:59 -0800 (PST)

• Stephen Smalley <sds@epoch.ncsc.mil> wrote:

> TE is preferable for integrity protection.

Sorry, my acronym matcher failed on "TE".

> IMHO, there is no need to
> introduce a Biba model to SELinux.

It is probably more trouble than it's worth.

> > Erg. Or handling caveats? Actually, the
> > above comment regarding the flexibility of
> > the system applies. If the system can't be
> > demonstrated to handle these, it probably
> > isn't very agile.
>
> Should be expressible using the category bitmaps.

You could certainly store handling caveats in the category bitmaps, but expressing NOFORN in categories has been tried and does not work.

---

Casey Schaufler
casey@schaufler-ca.com                 

---

Do you Yahoo!?
Meet the all-new My Yahoo! - Try it today! http://my.yahoo.com  

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Received on Mon 24 Jan 2005 - 11:39:08 EST