
	Where results make sense

Topic: Mandatory access control

Related Topics

Discretionary access control

	Mandatory access control - Wikipedia, the free encyclopedia
		This may extend or replace discretionary access control for file-system permissions and the concepts of users and groups.
		MAC has the goal of defining an architecture that requires the evaluation of all security-related labels and making decisions based upon the operations context and those same data labels.
		Access to information, programs and devices are controlled and granted at the same or lower level only.
	en.wikipedia.org /wiki/Mandatory_access_control (600 words)

	Access control - Wikipedia, the free encyclopedia
		Physical access control can be achieved by a human; a guard, bouncer, or receptionist, through mechanical means such as locks and keys, or through technological means such as a card access system.
		Access control systems provide the essential services of identification and authentication (IandA), authorization, and accountability where identification and authentication determine who can log on to a system, authorization determines what an authenticated user can do, and accountability identifies what a user did.
		In public policy, access control to restrict access to systems ("authorization") or to track or monitor behavior within systems ("accountability") is an implementation feature of using trusted systems for security or social control.
	en.wikipedia.org /wiki/Access_Control (1320 words)

	Access control - Wikipedia, the free encyclopedia
		Authorization may be implemented using Role based access control, access control lists or a policy language such as XACML.
		Access control is the ability to permit or deny the use of an object (a passive entity, such as a system or file) by a subject (an active entity, such as an individual or process).
		Access control techniques are generally categorized as either discretionary or mandatory.
	en.wikipedia.org /wiki/Access_control (1320 words)

	Chapter 2. Understanding Access Control
		Access control allows the administrators to set up policies and accounts that allow each user to have full access to the files and resources he or she needs, but not to other information and resources not immediately necessary to perform assigned tasks.
		MAC is essentially different from DAC in that the restrictions placed on file and resource access are not up to the discretion of the individual user, but are mandatory for all users.
		Mandatory Sensitivity (MSEN) is a mechanism for implementing strict controls on access to data.
	techpubs.sgi.com /library/dynaweb_docs/0650/SGI_EndUser/books/TCMW_UG/sgi_html/ch02.html (4675 words)

	Role Based Access Control
		The controls are discretionary in the sense that a subject with a certain access permission is capable of passing that permission (perhaps indirectly) on to any other subject (unless restrained by mandatory access control).
		Access control in the rules above does not require any checks on the user's right to access a data object, or on the transformation procedure's right to access a data item, since the data accesses are built into the transaction.
		Requiring the system to control access of transaction programs to objects through the access function used in rule (4) might then be a useful form of redundancy, but it could involve significant overhead for a limited benefit in enforcing integrity requirements.
	csrc.nist.gov /rbac/Role_Based_Access_Control-1992.html (3776 words)

	ANSDIT - The letter "M"
		In a processor with more than one instruction control unit, that instruction control unit to which, for a given interval of time, the other instruction control units are subordinated.
		In computer security, a means of restricting access to objects, based on the sensitivity, as represented by a sensitivity label, of the information contained in the objects and the formal authorization or security clearance of subjects to access information of that sensitivity, and enforced by the trusted computing base.
		An automatically controlled, reprogrammable, multipurpose, manipulative machine with several degrees of freedom, which may be either fixed in place or mobile for use in industrial automation applications.
	www.ncits.org /tc_home/k5htm/m1.htm (2158 words)

	Mandatory Access Control (Site not responding. Last check: 2007-11-03)
		MAC secures information by assigning sensitivity labels on information and comparing this to the level of sensitivity a user is operating at.
		MAC mechanisms assign a security level to all information, assign a security clearance to each user, and ensure that all users only have access to that data for which they have a clearance.
		Access is authorized or restricted to objects based on the time of day depending on the labeling on the resource and the user's credentials (driven by policy).
	www.cgisecurity.com /owasp/html/ch08s02.html (275 words)

	[No title]
		Mandatory access control (MAC), on the other hand, is a standardized method of categorizing resources and users based on a predetermined set of criteria overseen by an authority figure, such as a system administrator.
		This type of access control typically is used in database systems where each user is granted access to data via an application that meets a specific goal.
		User-based control is founded on a user name/password combination that is compared to an access control list to determine what permission a user has with regard to a resource.
	www.texmed.org /Template.aspx?id=1853 (1498 words)

	Fred Cohen & Associates
		The enforcement mechanism (e.g., self/group/public controls, access control lists) shall allow users to specify and control sharing of those objects by named individuals, or defined groups of individuals, or by both, and shall provide controls to limit propagation of access rights.
		The discretionary access control mechanism shall, either by explicit user action or by default, provide that objects are protected from unauthorized access.
		These access controls shall be capable of including or excluding access to the granularity of a single user.
	all.net /books/orange/chap3-1.html (1747 words)

	TrustedBSD - TrustedBSD Mandatory Access Control (MAC) Framework (Site not responding. Last check: 2007-11-03)
		Mandatory access controls extend discretionary access controls by allowing administrators to enforce additional security for all subjects (e.g.
		Development of those new access control models is facilitated by the development of a flexible kernel access control extension framework, the TrustedBSD MAC Framework.
		This permits new access control models to be introduced as kernel modules.
	www.trustedbsd.org /mac.html (282 words)

	Mandatory Access Control
		Mandatory Access Control allows new access control modules to be loaded, implementing new security policies.
		The mandatory part of the definition comes from the fact that the enforcement of the controls is done by administrators and the system, and is not left up to the discretion of users as is done with discretionary access control (DAC, the standard file and System V IPC permissions on FreeBSD).
		MAC security policy modules will not be covered.
	www.freebsd.org /doc/en_US.ISO8859-1/books/handbook/mac.html (446 words)

	Access Control
		One form of access control is seen in CPU instructions that may only be executed in supervisor mode, which usually amounts to within the kernel.
		The terms Discretionary and Mandatory are frequently used in the context of access control.
		Mandatory access control (MAC) involves aspects that the user cannot control (or is not usually allowed to control).
	www.kernelthread.com /publications/security/ac.html (1465 words)

	ITworld.com - LINUX SECURITY - Mandatory Access Control: Silver Bullet or Kafkaesque Nightmare?, Part 1
		Though it has been around since the 80's, MAC is still (literally) an obscure bureaucratic methodology not easily explained in plain language.
		The subject (a user, process, or administrator) may be able to access a file, but, because the file retains its classification label, they may not be able to transfer it to another user, or use any system utilities to copy it from the system.
		In a MAC system, if a file has been given a specific level of sensitivity (or context), then the system will not allow certain users, programs, or even administrators to perform operations on the file.
	www.itworld.com /nl/lnx_sec/10162001/pf_index.html (487 words)

	Enabling Access Control Security
		Default authorization consists of an access control checking feature that determines which users can execute a service, post an event, or enqueue (or dequeue) a message on an application queue.
		By using an access control list, an administrator can organize users into groups and associate the groups with objects that the member users have permission to access.
		It is easier to give a group of people access to a new service than it is to give individual users access to the service.
	e-docs.bea.com /tuxedo/tux80/atmi/secadm20.htm (1128 words)

	Mandatory Access Control
		Mandatory Access Controls are rules that control how users access a system in order to prohibit the unauthorized disclosure of any system or user data; or provide for the indefinite integrity of system objects or subjects.
		The mandatory part of the definition comes from the fact that the enforcement of the controls is done by administrators and the system, and is not left up to the discretion of users as is done with discretionary access controls (DAC, the normal access method).
		The MAC framework only augments security: without a good security policy and regular security checks, believing the system to be totally secure would be completely irrational.
	www.linuxinfor.com /english/FreeBSD/mac.html (584 words)

	MAC
		The POSIX.6 standard provides support for a mandatory access control policy by providing a labeling mechanism and a set of interfaces that can be used to determine access based on the MAC policy.
		The POSIX.6 standard does not define a mandatory access control policy per se, but does define the restrictions for access based upon the comparison of the MAC label associated with the subject and the MAC label associated with the object.
		MAC access decisions are based on labels that contain the security-relevant information.
	www.softpanorama.org /Access_control/mac.shtml (1687 words)

	Chapter 8. Access Control and Authorization
		Access control mechanisms are a necessary and crucial design element to any application's security.
		Access decisions are typically based on the authorizations granted to a user based on the credentials he presented at the time of authentication (user name, password, hardware/software token, etc.).
		Access to information is determined based on authorizations to access control lists based on user identifier and group membership.
	www.cgisecurity.com /owasp/html/ch08.html (805 words)

	Chapter 5. Administering Access Control
		The clearance of a subject must be at least equal to the classification of an object for MAC to allow the subject access to the object.
		Discretionary Access Control (DAC) is the name of the standard UNIX system of access permissions that allow the user to control access to files, directories, and other system resources.The added feature of Access Control Lists (ACLs) is implemented in IRIX.
		An Access Control List (ACL) works in the same way as standard file permissions, but it allows you to have a finer level of control over who may access the file or directory than standard permissions allow.
	techpubs.sgi.com /library/dynaweb_docs/0650/SGI_Admin/books/TCMW_AG/sgi_html/ch05.html (5110 words)

	Mandatory Access Control
		The mandatory part of the definition comes from the fact that the enforcement of the controls is done by administrators and the system, and is not left up to the discretion of users as is done with discretionary access control (DAC, the normal access method).
		MAC should not be relied upon to completely secure a system.
		A number of modules included with the MAC framework have specific characteristics which are provided for both testing and new module development.
	people.freebsd.org /~murray/handbook/mac.html (406 words)

	SELinux Mailing List: by thread
		A parallel mandatory access control is defined for each capability and must be granted by the security policy in order for the capability to be used.
		The fundamental statement of mandatory access control policy in the standard is hardly suitable for all mandatory security policies: Subjects cannot cause information labeled at some MAC label L1 to become accessible to subjects at L2 unless L2 dominates L1.
		Everyone has their own feelings on general access control frameworks and policy mechanisms, but my feeling is that there are a number of improvements that could be made to POSIX.1e to improve its usefulness with regards to more arbitrary MAC policies.
	www.nsa.gov /selinux/list-archive/0101/thread_body6.cfm (11322 words)

	Mandatory access control: Facts and details from Encyclopedia Topic (Site not responding. Last check: 2007-11-03)
		Mandatory Access Control (MAC) is a technique to protect and contain computer processes, EHandler: no quick summary.
		Discretionary access control (dac) defines basic access control policies to objects in a filesystem....
		Discretionary access control Discretionary access control quick summary:
	www.absoluteastronomy.com /encyclopedia/m/ma/mandatory_access_control.htm (693 words)

	Linux.com \| Securing Linux with Mandatory Access Controls
		MAC makes the enforcement of security policies mandatory instead of discretionary, as you might imagine from the name Mandatory Access Control.
		SELinux was originally a kernel patch developed by the NSA to add MAC to the Linux kernel.
		The Linux Intrusion Detection System is a kernel patch and set of administration tools that adds MAC as well as several other security enhancements to the standard Linux kernel.
	security.linux.com /security/05/02/11/2017218.shtml?tid=35 (1117 words)

	Mandatory Access Control (MAC) (Site not responding. Last check: 2007-11-03)
		Mandatory security policy can be divided into subpolicies, all mandatory by their nature, demonstrating the recursive nature of the definition.
		Mandatory Access Control (MAC) can be viewed as a subpolicy of mandatory security policy as well as the mandatory security policy as a whole if no other mandatory policies are implemented in the system.
		Privileges associated with a process are determined by appropriate MAC mechanisms, based on relevant mandatory security policy settings, on per task basis.
	www.linsec.org /doc/final/node20.html (200 words)

	Mandatory Access Control (MAC) (Site not responding. Last check: 2007-11-03)
		The MAC Framework permits compile-time, boot-time, and run-time extension of the kernel access control policy, and can be used to load support for Mandatory Access Control (MAC), and custom security modules such as hardening modules.
		When configured into a kernel, the MAC Framework permits security modules to augment the existing kernel access control model, restricting access to system services and objects.
		ugidfw(8), rules may limit access to files and directories based on the uid and gids of the process attempting the access, and the owner and group of the target of the access attempt.
	fdp.bg-freebsd.org /build/mac.html (1060 words)

	Network Mandatory Access Control (Site not responding. Last check: 2007-11-03)
		MAC enables system-level control of access to resources which prevents a compromised process from allocating its access rights to unauthorized users and enables finer-grained control of the rights available to root processes.
		The initial proposal for packet-level access control was based on the IP Security Options protocol, where packet labels are included in a special options IP header.
		Because access to particular IPsec security associations can be limited at the application level, application-to-application access control can be enforced across systems (assuming trust in the underlying OSes on both machines).
	www.cse.psu.edu /~tjaeger/research/netmac.html (541 words)

	Mandatory Access Control and Role-Based Access Control Revisited - Osborn (ResearchIndex)
		Abstract: In this paper we reexamine the interaction between role-based access control and mandatory access control.
		A detailed study of the structure of individual roles and edges in a role graph is undertaken.
		Mandatory access control and role-based access control revisited.
	citeseer.ist.psu.edu /407364.html (500 words)

	Tools
		If your kids are spending a lot of time chatting on the internet, or playing games, you have to set a time limit so as not to affect their grades.PC-Time Manager gives you the ability to share the same computer among your children by creating for each child a computer schedule.
		Access Manager is used to track employees activities in organizations that have from two to hundreds networked computers.
		Isolation applies an access restriction policy that effectively prevents all kinds of attacks, known and unknown.
	www.securityfocus.com /tools/category/67 (745 words)

Try your search on: Qwika (all wikis)