Re: [TCP] question on how to disable a file's network transmissioncapability

Subject: Re: [TCP] question on how to disable a file's network transmissioncapability
From: "Sandy Harris" <sandyinchina -at- gmail -dot- com>
To: TECHWR-L <techwr-l -at- lists -dot- techwr-l -dot- com>
Date: Sat, 23 Dec 2006 08:18:51 +0800

Gene Kim-Eng <techwr -at- genek -dot- com> wrote:

I don't think this is going to accomplish what was asked for
(letting people access and view the files they need but not
move or copy them to another machine or attach them to
email).


The standard term for what was asked for is Mandatory Access
Control, as opposed to Discretionary Acess Control which is
what most OSs -- Windows, Unix, MacOS, ... -- give you.

A web search on Mandatory Access Control will turn up
more info than you'll ever need, but here's a summary:

With DAC, users control acees to files, turn on sharing, etc.
With MAC, the system manages some of that. Usually MAC
is implemented as part of a secure OS (Multics is the classic
example) to give "multi-layer security". e.g. a Top Secret doc
cannot be sent to any person, process, machine or disk
drive that does not have Top Secret clearance. Even then,
they have to be authorised for your project before they can
get project docs.

MAC tends to be expensive, special-purpose stuff built
for gov't contracts, but it is available if you need it.

Ross Anderson has a good paper on why military
security standards may not apply or work well for
company security: I don't have exact URL.

Home page: http://www.cl.cam.ac.uk/~rja14/

--
Sandy Harris
Quanzhou, Fujian, China
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

WebWorks ePublisher Pro for Word features support for every major Help format plus PDF, HTML and more. Flexible, precise, and efficient content delivery. Try it today! http://www.webworks.com/techwr-l

Create HTML or Microsoft Word content and convert to Help file formats or printed documentation. Features include single source authoring, team authoring,
Web-based technology, and PDF output. http://www.DocToHelp.com/TechwrlList

---
You are currently subscribed to TECHWR-L as archive -at- infoinfocus -dot- com -dot-
To unsubscribe send a blank email to techwr-l-unsubscribe -at- lists -dot- techwr-l -dot- com
or visit http://lists.techwr-l.com/mailman/options/techwr-l/archive%40infoinfocus.com


To subscribe, send a blank email to techwr-l-join -at- lists -dot- techwr-l -dot- com

Send administrative questions to admin -at- techwr-l -dot- com -dot- Visit
http://www.techwr-l.com/techwhirl/ for more resources and info.


References:
question on how to disable a file's network transmission capability: From: technical writing plus
Re: [TCP] question on how to disable a file's network transmissioncapability: From: Gene Kim-Eng

Previous by Author: Re: A Friday Pome
Next by Author: Re: USAGE: weight of code
Previous by Thread: Re: [TCP] question on how to disable a file's network transmissioncapability
Next by Thread: Web Site Analysis (aka analyzing the IIS log file)


What this post helpful? Share it with friends and colleagues:


Sponsored Ads