Questions tagged [mandatory-access-control]
In computer security, mandatory access control (MAC) refers to a type of access control by which the operating system constrains the ability of a subject or initiator to access or generally perform some sort of operation on an object or target.
7 questions
11
votes
6
answers
2k
views
What is preventing the widespread common use of MAC-type systems?
Overall question
What is preventing the uptake of MAC systems such as SELinux/AppArmor in corporate and desktop computing environments?
Why don't you think it isn't already widespread?
I do not ...
user2213
9
votes
5
answers
3k
views
What is the practical difference between MAC and Capabilities
Both Mandatory Access Controls and Capabilities allow for fine grained privileges to be assigned to applications irrespective or in place of privileges inherited by the running user.
Is there any ...
- 3,606
8
votes
3
answers
12k
views
Bell-LaPadula imlementation example
I'm currently studying the Bell-LaPadula model and i need to do an implementation as an example.
I understand how the model works, but I have difficulties implementing it in a programming language (...
- 81
6
votes
1
answer
13k
views
What is a visible example for a mandatory access control (MAC)
I can see clearly how discretionary access control (DAC) works by checking the properties of a file on my MSWindows machine, the file has attributes and the owner of the file can do almost anything ...
- 8,843
4
votes
1
answer
370
views
Can too restrictive Linux MAC policy decrease security?
Can too restrictive MAC profile (e.x. AppArmor profile) decrease application security?
For example: could it be that too restrictive environment for web browser will protect host system very well ...
- 263
3
votes
1
answer
358
views
Protecting a database against insiders
Consider a network for a web-application with 1 webserver and 1 MySQL database, both on physically different servers and both running Linux. The database stores mission critical data and this data is ...
- 469
1
vote
1
answer
717
views
Can HIPS software practically be considered a form of MAC
Host Intrusion Prevention Software can restrict applications from taking certain actions regardless if they have the privileged to do so as assigned by the operating system.
Given that with the use ...
- 3,606