var _amdoc = {"sub_ctxs":{"SELinux":"base on LSM\n","SEBSD":"* BSD's implementation\n* TrustedBSD project\n* based on MAC\n","Access Control":"* DAC\n* MAC","Type Enforcement":"* allow user_t system_t : file read;\n[attach:TE_rule.png]\n","Traditional":"* DAC","MAC":"Mandatory Access Control\n* What?\n  * Rules\n  * Control\n* SELinux is a MAC\n* SELinux support:\n  * Type Enforcement (TE)\n  * Multi-Level Security (MLS)\n","Principle":"[attach:principles.png]\n","Rules":"* allow\n* type\n* neverallow\n* type_transition\n* ......\n","DAC":"* uid/euid\n* ACL\n* password\n","TE":"Type Enforcement\n* 根據 security context of\n  * subject\n  * object\n* 比對 security context 和 AV\n","MLS":"* security levels\n* limit directory of data flow\n* less-sensitive to more-sensitive\n[attach:MLS.png]\n\n","Type":"","Class":"* file\n* directory\n* process\n* ...\n","Role":"Role-Base Access Control\n* relationship\n[attach:role.png]\n","User":"user user_name role staff_r;\n","Object Transition":"","Role Transition":"* role_transition role_set type_set role;\n","User Descretion":"* user make a decission\n","Security Context":"* user\n* role\n* type\n* => user : role : type\n","AV":"Access Vector\n* a list of rule\n* control access of subject, object pair\n","Subject":"process/domain","Object":"is system resources\n* file\n* directory\n* socket\n* ...\n","Laws":"埃西莫夫 (Isaac Asimov)\n\n[attach:I_Robot_-_Runaround.jpg]\n"},"ajaxmind":[{"subject":"SELinux","x":217,"y":7,"fill":"rgb(255,255,128)","fontsz":15,"children":[1,2,3]},{"subject":"SEBSD","x":326,"y":38,"fill":"rgb(255,255,128)","fontsz":15,"children":[]},{"subject":"Access Control","x":238,"y":77,"fill":"rgb(255,255,128)","fontsz":15,"children":[4,5]},{"subject":"Type Enforcement","x":56,"y":51,"fill":"rgb(255,255,128)","fontsz":15,"children":[6,7]},{"subject":"Traditional","x":295,"y":118,"fill":"rgb(128,255,128)","fontsz":11,"children":[8]},{"subject":"MAC","x":225,"y":135,"fill":"rgb(128,255,128)","fontsz":13,"children":[9,10,11]},{"subject":"Principle","x":120,"y":89,"fill":"rgb(128,255,128)","fontsz":11,"children":[12,13,14,15]},{"subject":"Rules","x":15,"y":134,"fill":"rgb(128,255,128)","fontsz":11,"children":[16,17]},{"subject":"DAC","x":334,"y":158,"fill":"rgb(128,128,255)","fontsz":11,"children":[18]},{"subject":"Laws","x":273,"y":158,"fill":"rgb(128,128,255)","fontsz":11,"children":[]},{"subject":"TE","x":257,"y":196,"fill":"rgb(128,128,255)","fontsz":11,"children":[19,20,21,22]},{"subject":"MLS","x":211,"y":181,"fill":"rgb(128,128,255)","fontsz":11,"children":[]},{"subject":"Type","x":171,"y":124,"fill":"rgb(128,128,255)","fontsz":11,"children":[]},{"subject":"Class","x":156,"y":157,"fill":"rgb(128,128,255)","fontsz":11,"children":[]},{"subject":"Role","x":125,"y":134,"fill":"rgb(128,128,255)","fontsz":11,"children":[]},{"subject":"User","x":87,"y":134,"fill":"rgb(128,128,255)","fontsz":11,"children":[]},{"subject":"Object Transition","x":48,"y":179,"fill":"rgb(128,128,255)","fontsz":11,"children":[]},{"subject":"Role Transition","x":3,"y":209,"fill":"rgb(128,128,255)","fontsz":11,"children":[]},{"subject":"User Descretion","x":302,"y":198,"fill":"rgb(255,255,128)","fontsz":11,"children":[]},{"subject":"Security Context","x":269,"y":237,"fill":"rgb(255,255,128)","fontsz":11,"children":[]},{"subject":"AV","x":240,"y":267,"fill":"rgb(255,255,128)","fontsz":11,"children":[]},{"subject":"Subject","x":184,"y":267,"fill":"rgb(255,255,128)","fontsz":11,"children":[]},{"subject":"Object","x":174,"y":227,"fill":"rgb(255,255,128)","fontsz":11,"children":[]}]};