[E-Lang] E FAQ
Tue, 16 Oct 2001 12:55:30 -0700
At 10:27 -0700 01/10/16, Mark S. Miller wrote:
>At 10:15 AM 10/16/2001 Tuesday, Jonathan S. Shapiro wrote:
>>Discretionary control means control that the program *elects* to use. A
>>program that has the ability to perform setegid() but does not do so is
>>using discretionary control. Mandatory control means control that a program
>>is subjected to.
>Cool! Then I wasn't confused, and the Ode's usage is correct. Thanks!
There is the issue of "who's discretion". In the Orange Book context
it is explicitly or often implicitly the discretion of the principal, a person.
In Jonathan's example it is clearly the discretion of the program.
I think that this is the source of the frequent confusion, especially
The concept of the discretion of a program sounds muddy in the Orange
Norman Hardy <http://cap-lore.com/>