Philip Kirk - Solaris Sustaining wrote:
Hi,
I've made the draft for the PSARC fasttrack document available for
review here:
http://www.opensolaris.org/os/project/clearview/ipnet/fasttrack.txt
This document doesn't make any reference to Trusted Solaris
and the labelled networking that came with it.
You might like to include some reference to it, whether security
labels are ignored or respected.
Whilst the Trusted Solaris extensions make use of zones, I'm not
sure it is enough to rely on them to enforce the correct security
policy, especially if you'll be providing access to data between
zones (its not clear if a label security policy would be enforced
before or after this access) and providing a new means to access
raw data in the global zone.
Darren
_______________________________________________
networking-discuss mailing list
[email protected]
