Edge Rewrite
// HTMLRewriter · presentation

This page was redesigned at the edge.

Cloudflare fetched the original article and streamed it through HTMLRewriter to apply an entirely new visual system without rebuilding the source page.

// request.cf · coarse context

A page that knows where it met you.

Only coarse request metadata is shown. This demo does not display or persist visitor IP addresses.

Country
US
Cloudflare location
CMH
Connection
HTTP/2
Language
Not provided

Ray ID: a225979d1ce5376a

Jump to content

Talk:Type enforcement

Page contents not supported in other languages.
Add topic
From Wikipedia, the free encyclopedia
Latest comment: 1 year ago by 91.221.120.78 in topic Type enforcement: MAC over DAC

Type enforcement: MAC over DAC

[edit]

"Implementing TE gives priority to mandatory access control (MAC) over discretionary access control (DAC)."

I'm not sure if it can be phrased like that. It associates that if an MAC exists that it will be done first. But when using e.g. SELinux it can happen that MAC won't happen. Because DAC is evaluated first and if DAC forbids an access then MAC won't be evaluated anymore. --reichhart 91.221.120.78 (talk) 10:57, 22 January 2025 (UTC)Reply