Re: nsa code ?

[Greg KH <greg@wirex.com>]

On Sat, Mar 17, 2001 at 03:42:22PM -0800, Crispin Cowan wrote:
> Andreas Jellinghaus wrote:
> 
> > what do people here think about the nsa secure linux ?
> > is anyone integrating this into a linux distribution ?
> > why not ?
> 
> SELinux uses Type Enforcement, a form of Mandatory Access Control
> (MAC) that is more flexible than the hierarchical access control
> concepts suggested by the Orange Book.  Type Enforcement employ a 2-way
> "domains & types" approach of (roughly) mapping subjects to Domains and
> objects to Types and then specifying which Domains can access which
> Types.  This powerful abstraction allows the administrator a lot of
> expressiveness in specifying what users may do to each other's files.

If you haven't read it yet, there is a very good article explaining in
detail how SELinux's type enforcement works at:
	http://www-106.ibm.com/developerworks/security/library/s-selinux/index.html?dwzone=security


greg k-h

-- 
greg@(kroah|wirex).com
http://immunix.org/~greg
-
Securedistros: A common list for all secured Linux distributions
Archive:       http://humbolt.nl.linux.org/lists/