For those of use who dont have (or have not had) ready access to half a
dozen "secure" systems.
Can someone please comment on / answer the following ?
- TE is a MAC mechanism for providing least privilege
- MLS is a hierarchical labeling scheme for MAC (originally aimed at
confidentiality)
- B2 systems require 'least privilege' mechanism (in addition to the MLS
required at B1)
- Firewalls seem to be more intuitively served with least privilege than
with MLS
Is there a common model or mechanism (other than TE) for least privilege in
B2 (and above) systems ?
TIA
JonT
|
|
