Use case where MAC and DAC complement each other



  • We can implement MAC and DAC together and they can complement each other. My understanding is when MAC is there it overrides everything. Can anyone help me understand how they can work together?



  • SELinux policy rules are checked after DAC rules. SELinux policy rules are not used if DAC rules deny access first.


Log in to reply
 

Suggested Topics

  • 2
  • 2
  • 2
  • 2
  • 2
  • 2
  • 2
  • 2