Biba explained – Part 5

This is where things can get confusing, learning how labels and the levels work was pretty easy.  The compartments work differently, here is an example.

process1        biba/50:5+6+7
process2        biba/50:5+6
process3        biba/50

Here we have three processes, all level 50. In this example process3 would not be able to read anything from process1 or process2.  Process1 would be able to read from process2 but process2 would not be able to read from process1 because it’s not in level 7 and it does not trust that. Also for writing even though process2 cannot read from process1 it can write to it.

This will take practice and if you just set it up on your own I am sure it will click quickly.