freebsd-dev/sys/security/mac_biba
Robert Watson 2a1c79af92 Add compartment support to Biba and MLS policies. The logic of the
policies remains the same: subjects and objects are labeled for
integrity or sensitivity, and a dominance operator determines whether
or not subject/object accesses are permitted to limit inappropriate
information flow.  Compartments are a non-hierarchal component to
the label, so add a bitfield to the label element for each, and a
set check as part of the dominance operator.  This permits the
implementation of "need to know" elements of MLS.

Obtained from:	TrustedBSD Project
Sponsored by:	DARPA, Network Associates Laboratories
2002-10-21 18:42:01 +00:00
..
mac_biba.c Add compartment support to Biba and MLS policies. The logic of the 2002-10-21 18:42:01 +00:00
mac_biba.h Add compartment support to Biba and MLS policies. The logic of the 2002-10-21 18:42:01 +00:00