Edge Rewrite
// request.cf · coarse context

A page that knows where it met you.

Only coarse request metadata is shown. This demo does not display or persist visitor IP addresses.

Country
US
Cloudflare location
CMH
Connection
HTTP/2
Language
Not provided

Ray ID: a23745d3eafb910d

Jump to content

Talk:Type enforcement

Page contents not supported in other languages.
Add topic
From Wikipedia, the free encyclopedia
Latest comment: 1 year ago by 91.221.120.78 in topic Type enforcement: MAC over DAC

Type enforcement: MAC over DAC

[edit]

"Implementing TE gives priority to mandatory access control (MAC) over discretionary access control (DAC)."

I'm not sure if it can be phrased like that. It associates that if an MAC exists that it will be done first. But when using e.g. SELinux it can happen that MAC won't happen. Because DAC is evaluated first and if DAC forbids an access then MAC won't be evaluated anymore. --reichhart 91.221.120.78 (talk) 10:57, 22 January 2025 (UTC)Reply