[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: key management
On Dec 13, 14:12, Paul A. Karger wrote:
} Subject: Re: key management
% Mutually suspicious users can only share the same host if you
% have a trusted operating system of some kind to separate them.
It isn't clear to me what you mean by "trusted operating system".
If you mean an OS with Mandatory Access Controls (e.g. B1 or better
per Orange Book), then I disagree. A C2 operating system with
Discretionary Access Controls permits user A to configure permissions
such that user B does not have access to user A's data and resources.
If user A is on such a system and does not trust user B, then user A
can configure its permissions accordingly. MAC is needed when one is
trying to enforce some kind of multi-level security policy, not merely
to separate mutually suspicious users.
Ran
atkinson@itd.nrl.navy.mil
Follow-Ups:
References: