Lines Matching +full:flow +full:- +full:level

1 .\" Copyright (c) 2002-2004 Networks Associates Technology, Inc.
7 .\" DARPA/SPAWAR contract N66001-01-C-8035 ("CBOSS"), as part of the
40 .Bd -ragged -offset indent
47 .Bd -ragged -offset indent
53 .Bd -literal -offset indent
61 a strict information flow policy.
63 up of hierarchal grades, and non-hierarchal components.
65 order, with information flow protections based on a dominance operator
69 The non-hierarchal compartment field is expressed as a set of up to 256
71 A complete label consists of both hierarchal and non-hierarchal elements.
74 .Bl -column -offset indent ".Li biba/equal" "lower than all other labels"
101 .Bl -bullet
103 A subject at the same integrity level as an object may both read from
106 A subject at a higher integrity level than an object may write to the object,
109 A subject at a lower integrity level than an object may read the object,
117 behavior of higher integrity subjects by preventing the flow of information,
129 to a lower integrity object, but downgrades the integrity level of the subject
137 preventing the downward flow of information rather than the upward flow of
139 Multi-Level Security (MLS) protects the confidentiality, rather than the
152 .Bd -literal -offset indent
166 .D1 Li biba / Ar effectivegrade : effectivecompartments ( lograde : locompartments -
171 .Bd -literal -offset indent
172 biba/10:2+3+6(5:2+3-20:2+3+4+5+6)
173 biba/high(low-high)
189 MIBs are available for fine-tuning the enforcement of this MAC policy.
190 .Bl -tag -width ".Va security.mac.biba.ptys_equal"
232 under DARPA/SPAWAR contract N66001-01-C-8035