Reference monitor concept implementation

[Ilmar S. Habibulin]

I do not know where is better to address this, maybe to -arch?
While reading the description of WinNT security subsystem i noticed that
something called Security Reference Monitor, which handles all access
requests and grands or denys them. That is the thing Orange Book is
talking about.
If you'll look through the freebsd source, you can see that all fs drivers
handles access requests by themselves. At the same time the codes are
equal. I suggest to change fs drivers and kernel so that fs drivers will
suply kernel with security attributes of the files(directories and so
on) and kernel will make decision on granting or denying access.
There would be much more easy to implement different access control
mechanisms in such system.

PS. My early Mandatory Access Control implementation was coded in the FFS
driver. While trying to spread MAC to other objects i understand my
mistake. Now MAC is in syscalls. 

So what people would you say?


To Unsubscribe: send mail to majordomo at cyrus.watson.org
with "unsubscribe posix1e" in the body of the message