Collaborate Disseminate
I have referred this answer but I couldn’t understand it properly.
I know that
Mandatory access control (MAC) is a system-controlled policy
restricting access to resource objects (such as data files, devices,
systems… Continue reading Mandatory access control vs Discretionary access control
Citing wikipedia’s MAC article:
With mandatory access control, this security policy is centrally
controlled by a security policy administrator; users do not have the
ability to override the policy and, for example, grant access to … Continue reading Why is linux filesystem considered DAC and not MAC
How to convert access control matrix to Bell-LaPadula.
Can teach me step by step
O1 O2 O3 O4
S1 w r w rw
S2 rw r
S3 w w r
S4 w w w r
S5 rw rw r
I’m trying to run Tor Browser Bundle within an SELinux sandbox. I tried to do the following, after looking at man sandbox:
[redacted@localhost ~]$ sandbox -X -H sehome -T tmp -I /run/user/1000/dbus-1/* -t sandbox_web_t ~/Dow… Continue reading How does one grant access to directories with SELinux’s sandbox utility? [migrated]
Can a badly or even maliciously configured AppArmor profile reduce security, or can it only improve it? I read that apparently AppArmor cannot override unix file permissions, so it shouldn’t give a user more read-write-execut… Continue reading Can a badly configured AppArmor profile reduce security?
On an board running Linux I see a daemon and an utility run under root when started. The SELinux is enforcing for this system.
Are there any potential threats of running as root, even if the SELinux policies are quite well written and str… Continue reading What are the security risks of running a daemon as root even though SELinux is enforcing?
I know it’s not the proper place to ask this kind of questions. However I really need to understand the weakness of this policy of this access control matrix and how the user S3 can read the file.txt.
———————–… Continue reading The Access control Matrix weakness
what the Chinese wall models try to achieve and how it differ from or improve upon the Bell-LaPadula and Biba models
Continue reading Question about compare Bell-LaPadula and Biba models with Chinese wall policy
Can too restrictive MAC profile (e.x. AppArmor profile) decrease application security?
For example: could it be that too restrictive environment for web browser will protect host system very well while disabling some internal browser sec… Continue reading Can too restrictive Linux MAC policy decrease security?