Policy Logic vs. Policy component?

Policy Logic vs. Policy component?

[Park Lee]

Hi,

In Figure 2 of "The Flask Security Architecture:System
Support for Diverse Security Policies", There is a
statement:
"The security server consults the labeling rules in
the policy logic, determines a security context for
the new object, ... ".

Here, can we replace the words "policy logic" with
"policy component"?
and Why it is called "policy logic"?



Best Regards,
Park Lee

__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: Policy Logic vs. Policy component?

[Stephen Smalley]

On Sun, 2005-06-05 at 03:18 -0700, Park Lee wrote:
> In Figure 2 of "The Flask Security Architecture:System
> Support for Diverse Security Policies", There is a
> statement:
> "The security server consults the labeling rules in
> the policy logic, determines a security context for
> the new object, ... ".
> 
> Here, can we replace the words "policy logic" with
> "policy component"?
> and Why it is called "policy logic"?

A policy component would be something like TE, RBAC, or MLS.  Policy
logic is a more general term.

-- 
Stephen Smalley
National Security Agency


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.