Jump to content

Talk:Type enforcement

Page contents not supported in other languages.
From Wikipedia, the free encyclopedia

Type enforcement: MAC over DAC

[edit]

"Implementing TE gives priority to mandatory access control (MAC) over discretionary access control (DAC)."

I'm not sure if it can be phrased like that. It associates that if an MAC exists that it will be done first. But when using e.g. SELinux it can happen that MAC won't happen. Because DAC is evaluated first and if DAC forbids an access then MAC won't be evaluated anymore. --reichhart 91.221.120.78 (talk) 10:57, 22 January 2025 (UTC)[reply]