Questions tagged [mandatory-access-control]

In computer security, mandatory access control (MAC) refers to a type of access control by which the operating system constrains the ability of a subject or initiator to access or generally perform some sort of operation on an object or target.

Filter by
Sorted by
Tagged with
9
votes
5answers
2k views

What is the practical difference between MAC and Capabilities

Both Mandatory Access Controls and Capabilities allow for fine grained privileges to be assigned to applications irrespective or in place of privileges inherited by the running user. Is there any ...
11
votes
6answers
1k views

What is preventing the widespread common use of MAC-type systems?

Overall question What is preventing the uptake of MAC systems such as SELinux/AppArmor in corporate and desktop computing environments? Why don't you think it isn't already widespread? I do not ...
5
votes
1answer
11k views

What is a visible example for a mandatory access control (MAC)

I can see clearly how discretionary access control (DAC) works by checking the properties of a file on my MSWindows machine, the file has attributes and the owner of the file can do almost anything ...
4
votes
1answer
237 views

Can too restrictive Linux MAC policy decrease security?

Can too restrictive MAC profile (e.x. AppArmor profile) decrease application security? For example: could it be that too restrictive environment for web browser will protect host system very well ...
1
vote
1answer
624 views

Can HIPS software practically be considered a form of MAC

Host Intrusion Prevention Software can restrict applications from taking certain actions regardless if they have the privileged to do so as assigned by the operating system. Given that with the use ...
3
votes
1answer
306 views

Protecting a database against insiders

Consider a network for a web-application with 1 webserver and 1 MySQL database, both on physically different servers and both running Linux. The database stores mission critical data and this data is ...