A Domain and Type Enforcement UNIX Prototype

UNIX system security today often relies on cor rect operation of numerous privileged subsystems and careful attention by expert system administra tors In the context of global and possibly hostile networks these traditional UNIX weaknesses raise a legitimate question about whether UNIX systems are appropriate platforms for processing and safe guarding important information resources Domain and Type Enforcement DTE is an access control technology for partitioning host operating systems such as UNIX into access control domains Such partitioning has promise both to enforce organiza tional security policies that protect special classes of information and to generically strengthen operat ing systems against penetration attacks This paper reviews the primary DTE concepts discusses their application to IP networks and NFS and then de scribes the design and implementation of a DTE UNIX prototype system