Re: Finally

From: ao@morpork.shnet.org (A. Ott)
Subject: Re: Finally
Date: 02 Feb 2000 12:45:00 +0100

Next Article (by Subject): fs as module / undefined symbol rsbac_sec_del ao@morpork.shnet.org (A. Ott)
Previous Article (by Subject): Finally "Paul D. Robertson"
Top of Thread: Finally "Paul D. Robertson"
Articles sorted by: [Date] [Author] [Subject]

********* ***************** ********** ****  *****   ***** ************
  To subject Finally
  proberts@clark.net (Paul D. Robertson)  wrote:
********** ******************** ******  ********  ******* *************

> After some people and provider changes, http://www.linuxsecurity.com/ is
> going live.  I expect that it'll be announced "officially" at Linux World.
>
> The current feature article is a short piece on RSBAC that I did a few
> months back.  I'd appreciate any feedback.  The last time I had a chance
> to look, the only thing that needed changing was the RSBAC URL.

There is at least one URL change missing in 'RSBAC Modules - Short Tour'.

> Please note that it's intened to pique interest in this project, so it
> might not be as deep as many wish.  I start a new job Monday, and if my
> new employer doesn't mind, I expect to follow up with a basic "Installing
> RSBAC" piece.

The RC model got an important separation-of-duty extension, which should  
be mentioned, but does not need to be explained here.

The MAC model term 'compartment' does not refer to the security  
classification (called security level in the MAC module). It is something  
different and should not be confused. In the short explanation the  
security levels (unclassified, confidential, secret and top secret) should  
be sufficient to show how it works.

BTW: There is some design issue regarding writing to higher levels: Bell- 
LaPadula allow this, System V/MLS not. RSBAC currently does, but will  
probably change that soon.

ACL groups and menues have been finished and included in 1.0.9a final.

Paul, thanks for your work!

As you know, every sort of documentation, like howto, man pages, etc., are  
always appreciated.

More articles, e.g. about first experiences, will also be very useful -  
the more people know and help, the better.

Amon.

--
Please remove second ao for E-Mail reply - no spam please!
## CrossPoint v3.11 ##
-
To unsubscribe from the rsbac list, send a mail to
majordomo@morpork.shnet.org with
unsubscribe rsbac
as single line in the body.

Go to Compuniverse LWGate Home Page.