Registry Specification for Mandatory Access Control (MAC) Security Label Formats

Metadata

Publisher: IETF
Doc Type: Standard
Pages: 10
Abstract: In the past, Mandatory Access Control (MAC) systems have used very rigid policies that were implemented in particular protocols and platforms. As MAC systems become more widely deployed, additional flexibility in mechanism and policy will be required. While traditional trusted systems implemented Multi-Level Security (MLS) and integrity models, modern systems have expanded to include such technologies as type enforcement. Due to the wide range of policies and mechanisms that need to be accommodated, it is unlikely that the use of a single security label format and model will be viable. To allow multiple MAC mechanisms and label formats to co-exist in a network, this document creates a registry of label format specifications. This registry contains label format identifiers and provides for the association of each such identifier with a corresponding extensive document outlining the exact syntax and use of the particular label format.
Publication Date: 2015-07-01
Status Note: Proposed Standard
DOI: 10.17487/RFC7569
Link: https://doi.org/10.17487/RFC7569
Author(s): David Quigley
Jarrett Lu
Thomas Haynes
Keyword(s): NFSv4

Latest version of IETF RFC 7569

Document Versions — IETF RFC 7569

▶ IETF RFC 7569 (2015-07-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

IETF RFC 20 [Active*]
IETF RFC 5226 [Superseded*]

Bibliographic Reference(s)

IETF.draft-ietf-cipso-ipsecurity-01 — CIPSO EXTERNAL
NIST.FIPS.188 — FP188 EXTERNAL
Spencer, R., Smalley, S., Loscocco, P., Hibler, M., Andersen, D., and J. Lepreau, "The Flask Security Architecture: System Support for Diverse Security Policies", In Proceedings of the Eighth USENIX Security Symposium, pages 123-139, August 1999, < https://www.cs.cmu.edu/~dga/papers/ flask-usenixsec99.pdf >. EXTERNAL
Bell, D. and L. LaPadula, "Secure Computer Systems: Mathematical Foundations and Model", Technical Report M74-244, The MITRE Corporation, Bedford, MA, May 1973. EXTERNAL
Secure Computing Corporation, "Assurance in the Fluke Microkernel Formal Security Policy Model", Document 00-0930896A001 Rev B, 17 Feb 1999, Secure Computing Corporation, Roseville, MN, USA, February 1999, < http://www.cs.utah.edu/flux/fluke/html/fspm.ps.gz >. EXTERNAL
IETF RFC 1108 [Active*]
IETF RFC 2401 [Superseded*]
IETF RFC 5570 [Active*]
IETF RFC 7204 [Active*]

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC7569.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 7569, Registry Specification for Mandatory Access Control (MAC) Security Label Formats. Available at https://doi.org/10.17487/RFC7569

Snippet:

IETF RFC 7569, Registry Specification for Mandatory Access Control (MAC) Security Label Formats. Available at https://doi.org/10.17487/RFC7569

HTML (ISO 690 compliant)

Preview:

IETF RFC 7569, Registry Specification for Mandatory Access Control (MAC) Security Label Formats. Available at https://doi.org/10.17487/RFC7569

Snippet:

<span class="citation"><cite>IETF RFC 7569</cite>, Registry Specification for Mandatory Access Control (MAC) Security Label Formats. Available at <a href="https://doi.org/10.17487/RFC7569" target="_blank" rel="noopener">https://doi.org/10.17487/RFC7569</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 7569, Registry Specification for Mandatory Access Control (MAC) Security Label Formats
doi: 10.17487/RFC7569
url: https://doi.org/10.17487/RFC7569

Snippet:

<li>
<cite id="bib-rfc7569">IETF RFC 7569</cite>, Registry Specification for Mandatory Access Control (MAC) Security Label Formats
<span class="doi">10.17487/RFC7569</span>
</li>

Referenced By

IETF RFC 7862 [Active*]