Question

From the figure below, there is no arrow from process C to object 2.

a) would such an arrow be allowed? If not, what rule would it violate?

b) if process-to-process messages were allowed, what rules would apply to them?

c) For the process C in particular, to which processes could it send messages and which not?

Security level Legend Process Objoct Read Write The Bell-LaPadula multilevel security model

Answer 1

Hi,

Answer for question a: This is not allowed. This is called 'the star property rule.' This means process at a given security level may not write to any object at a lower security level.

----------------------------------------------------------------------------------------------

Answer for question b: In case of process to process message are allowed, then 'Strong star property' is applicable. Both process must have matching security level.

----------------------------------------------------------------------------------------------

Answer for question c: The process C can send messages to process D and E.