July 2006
Intermediate to advanced
456 pages
9h 45m
English
In this chapter
• 8.1 Multilevel Security Constraints
• 8.2 Security Contexts with MLS
In recent enhancements to SELinux, the constraint feature has been extended to implement an optional multilevel security (MLS) policy. MLS is another form of mandatory access control, which is built upon type enforcement (TE). In this chapter, we explore the optional MLS policy features.
MLS is another form of mandatory access control that is applicable to some security problems, especially those associated with government-classified data control. Much of the early computer security research was driven by the goal of ...