Tag Info

New answers tagged


No, the intended difference is that MAC says the security officer has given me access to, for example, the SDE compartment. Within it, there are files I can set (DAC) acls on, but no matter what access I assign you, the MAC will stop you from reading those files unless you also have been cleared for access to SDE. Discretionary access is under my control ...

Top 50 recent answers are included