|
Remember that in mandatory access control, restrictions to allowed
information flows are not decided at the user's discretion (as with
Unix chmod), but instead enforced by system policies. Mandatory access
control mechanisms are aimed in particular at preventing policy violations
by untrusted application software, which typically have at least the
same access privileges as the invoking user.
We will first show two simple examples for mandatory access control
and then introduce more advanced multilevel security models.
|
