Introduction to MAC Policies

• MAC: Mandatory Access Control

• A variety of interesting policies

  • Confidentiality/sensitivity (MLS)
  • Integrity protection (Biba, LOMAC)
  • Rule-based (TE, bsdextended)
  • Environment-specific (ifoff, seeotheruids, partition)

• Common attributes

  • Protects system-maintained objects based on administrator-defined criteria
  • Many label objects