Skip to content

Commit

Permalink
Dave Quigley's comments
Browse files Browse the repository at this point in the history
  • Loading branch information
loghyr committed May 1, 2012
1 parent f21e0be commit 72686b7
Show file tree
Hide file tree
Showing 2 changed files with 6 additions and 6 deletions.
4 changes: 2 additions & 2 deletions labreqs_middle_introduction.xml
Expand Up @@ -4,8 +4,8 @@
<section anchor="sec:intro" title="Introduction"> <section anchor="sec:intro" title="Introduction">
<t> <t>
Mandatory Access Control (MAC) systems have been mainstreamed in Mandatory Access Control (MAC) systems have been mainstreamed in
modern operating systems such as Linux (R), FreeBSD (R), Solaris modern operating systems such as Linux (R), FreeBSD (R), and Solaris
(TM), and Windows Vista (R). MAC systems bind security attributes to (TM). MAC systems bind security attributes to
subjects (processes) and objects within a system. These attributes subjects (processes) and objects within a system. These attributes
are used with other information in the system to make access control are used with other information in the system to make access control
decisions. decisions.
Expand Down
8 changes: 4 additions & 4 deletions labreqs_middle_requirements.xml
Expand Up @@ -88,9 +88,9 @@
be specified in a complete and unambiguous manner while maintaining the be specified in a complete and unambiguous manner while maintaining the
flexibility of MAC implementations. To accomplish this the labels flexibility of MAC implementations. To accomplish this the labels
should consist of an opaque component bound with a Label Format Specifier (LFS). should consist of an opaque component bound with a Label Format Specifier (LFS).
The opaque component consists of the label which will be interpreted by the MAC The LFS component provides a mechanism for identifying the structure and semantics of the
model on the other end while the LFS provides a mechanism for identifying the opaque component. Meanwhile, the opaque component is the security label which will
structure and semantics of the label's components. be interpreted by the MAC models.
</t> </t>


<t> <t>
Expand Down Expand Up @@ -349,7 +349,7 @@
Therefore, if an existing server is upgraded to include LNFS support, Therefore, if an existing server is upgraded to include LNFS support,
then it is the responsibility of the security system to then it is the responsibility of the security system to
define the behavior for existing objects. For example, if define the behavior for existing objects. For example, if
the security system is LFS 0, which means the server just the security system is that the server just
stores and returns labels, then existing files should stores and returns labels, then existing files should
return labels which are set to an empty value. return labels which are set to an empty value.
</t> </t>
Expand Down

0 comments on commit 72686b7

Please sign in to comment.