Posted by: Dan O'Connor
biba, FreeBSD biba
This is where things can get confusing, learning how labels and the levels work was pretty easy. The compartments work differently, here is an example.
process1 biba/50:5+6+7 process2 biba/50:5+6 process3 biba/50
Here we have three processes, all level 50. In this example process3 would not be able to read anything from process1 or process2. Process1 would be able to read from process2 but process2 would not be able to read from process1 because it’s not in level 7 and it does not trust that. Also for writing even though process2 cannot read from process1 it can write to it.
This will take practice and if you just set it up on your own I am sure it will click quickly.