Can you give a visible mandatory access control example?

Question

Explain how MAC works via an example? Can I create a file under MAC? How will the file get its attributes? I tried to find more about MAC through various websites and one of those explained that Mandatory access control is a method of limiting access to resources based on the sensitivity of the information that the resource contains and the authorization of the user to access information with that level of sensitivity. You define the sensitivity of the resource by means of a security label.

Amit Sinha · Accepted Answer

There are a couple of ways that you can see Mandatory Access Control examples - SELinux is installed on a number of linux distributions and can be set in enforcing mode which would show an example. Also Windows Mandatory Integrity Levels are another example. An example of this could be done by getting a Windows 8 machine and trying to modify files within a Windows 8 store programs installation directory (under the hidden directory c:program fileswindowsapps). Even as an administrative user you will be prevented from changing these files via standard OS tools even after you have "taken ownership" of the file, which in a DAC system would usually allow you to modify it..

Can you give a visible mandatory access control example?

About this question

Your answer

1 Answer

More SQL Server discussions

Learn & Explore

SQL Server Tutorials

SQL Server Interview Q&A

Latest SQL Server Blogs

Want answers to more SQL Server questions?

Stay in the loop — it’s free

You’re on the list!