Lines Matching +full:three +full:- +full:level

1 .\" Copyright (c) 2002-2004 Networks Associates Technology, Inc.
7 .\" DARPA/SPAWAR contract N66001-01-C-8035 ("CBOSS"), as part of the
40 .Bd -ragged -offset indent
47 .Bd -ragged -offset indent
53 .Bd -literal -offset indent
63 up of hierarchal grades, and non-hierarchal components.
69 The non-hierarchal compartment field is expressed as a set of up to 256
71 A complete label consists of both hierarchal and non-hierarchal elements.
73 Three special label values exist:
74 .Bl -column -offset indent ".Li biba/equal" "lower than all other labels"
101 .Bl -bullet
103 A subject at the same integrity level as an object may both read from
106 A subject at a higher integrity level than an object may write to the object,
109 A subject at a lower integrity level than an object may read the object,
129 to a lower integrity object, but downgrades the integrity level of the subject
139 Multi-Level Security (MLS) protects the confidentiality, rather than the
152 .Bd -literal -offset indent
157 Subject labels consist of three label elements: an effective (active) label,
166 .D1 Li biba / Ar effectivegrade : effectivecompartments ( lograde : locompartments -
171 .Bd -literal -offset indent
172 biba/10:2+3+6(5:2+3-20:2+3+4+5+6)
173 biba/high(low-high)
189 MIBs are available for fine-tuning the enforcement of this MAC policy.
190 .Bl -tag -width ".Va security.mac.biba.ptys_equal"
232 under DARPA/SPAWAR contract N66001-01-C-8035