K 10
svn:author
V 7
rwatson
K 8
svn:date
V 27
2002-10-21T18:42:01.000000Z
K 7
svn:log
V 603
Add compartment support to Biba and MLS policies.  The logic of the
policies remains the same: subjects and objects are labeled for
integrity or sensitivity, and a dominance operator determines whether
or not subject/object accesses are permitted to limit inappropriate
information flow.  Compartments are a non-hierarchal component to
the label, so add a bitfield to the label element for each, and a
set check as part of the dominance operator.  This permits the
implementation of "need to know" elements of MLS.

Obtained from:	TrustedBSD Project
Sponsored by:	DARPA, Network Associates Laboratories

END