Screen Version

School of Computer Science & Engineering
University of New South Wales
 Advanced Operating Systems 
 COMP9242 2002/S2 

Mungi Security

Two basic kinds of mechanisms:

• Discretionary access control
  • user-oriented mechanism
  • users determine which of their data should be accessible to others
  • essential for privacy
  • two basic models: access control lists and capabilities
• Mandatory access control
  • system-oriented mechanism
  • system-wide security policy limits data flow
  • essential for use of untrusted extensions
  • range of models: Denning, Bell-LaPadula, Chinese Wall, role-based....

Mungi has both