Mandatory Access Control

Abstract

This thesis discusses the Mandatory Access Control security model, using both a theo- retical and a practical approach. Necessary basic security theory and theory concerning security policies are discussed. A formal policy algebra, based on set theory and logic, is discussed and used to specify a policy which is implemented using the SELinux security framework. The SELinux security framework is briefly discussed and its control model explained.