Re: feasibility of principal-based access control Bill Frantz (frantz@netcom.com)
Mon, 19 Jul 1999 22:17:24 -0700

The whole reason for mandatory security enforcement became blindingly clear to me when someone from the NCSC said, "We trust the user. He had been cleared. We don't trust the program he is running." This person meant programs such as shells, compilers, and database systems.


Bill Frantz | The availability and use of secure encryption may         |
Periwinkle  | offer an opportunity to reclaim some portion of           |
Consulting  | the privacy we have lost. - B. FLETCHER, Circuit Judge    |