5 - Authorization

Question 1

DAC vs. MAC

Answer 1

DAC the user can decide how it is shared

• cannot control information flow
• employer should decide how to handle sensitive data (sometimes)

MAC addresses these problems

Question 2

Information flow problem

Answer 2

User a gives access to user b, user b gives access to user c

Files can be copied to get around security

Prevent with MAC

Question 3

Access control list implementation

Answer 3

ACL is list of who can access file on what level

Each resource looks like a file

Each file has owner (UID) group, and world

Set read write execute for each

Only owner can change permissions