Talk:Type enforcement

This article is rated Stub-class on Wikipedia's content assessment scale. It is of interest to the following WikiProjects:

Computing This article is within the scope of WikiProject Computing, a collaborative effort to improve the coverage of computers, computing, and information technology on Wikipedia. If you would like to participate, please visit the project page, where you can join the discussion and see a list of open tasks. ??? This article has not yet received a rating on the project's importance scale. Computer security: Computing Mid‑importance This article is within the scope of WikiProject Computer security, a collaborative effort to improve the coverage of computer security on Wikipedia. If you would like to participate, please visit the project page, where you can join the discussion and see a list of open tasks. Mid This article has been rated as Mid-importance on the project's importance scale. This article is supported by WikiProject Computing (assessed as Mid-importance). Things you can help WikiProject Computer security with: Article alerts are available, updated by AAlertBot. More information... Review importance and quality of existing articles Identify categories related to Computer Security Tag related articles Identify articles for creation (see also: Article requests) Identify articles for improvement Create the Project Navigation Box including lists of adopted articles, requested articles, reviewed articles, etc. Find editors who have shown interest in this subject and ask them to take a look here.

Type enforcement: MAC over DAC

"Implementing TE gives priority to mandatory access control (MAC) over discretionary access control (DAC)."

I'm not sure if it can be phrased like that. It associates that if an MAC exists that it will be done first. But when using e.g. SELinux it can happen that MAC won't happen. Because DAC is evaluated first and if DAC forbids an access then MAC won't be evaluated anymore. --reichhart 91.221.120.78 (talk) 10:57, 22 January 2025 (UTC)[reply]