[cap-talk] Mandatory Access Control (was: What's "Discretionary Security")

[Ka-Ping Yee]

> If I felt sufficiently confident to introduce a generally accepted
> definition, I would go ahead and do so. In point of fact, I *don't* know
> exactly what the term means (and apparently neither does anybody else).
[...]
> The problem: since I don't have a solid definition to offer, I don't
> want to update the page.

If that's your best understanding of the situation, it's okay to say
so in the Wikipedia article.  It doesn't have to say "the one true
definition is X"; it's typical practice for articles to explain what
different camps say about a topic and describe the sources of
disagreement without picking a single perspective.

It can even say "the MLS camp appears to define the term like this,
but other security folks (cite references) are skeptical of the
term's usefulness for reasons X and Y", etc.


-- ?!ng