Browse Definitions :
Definition

Flexible Mandatory Access Control (FMAC)

What is Flexible Mandatory Access Control (FMAC)? 

Flexible Mandatory Access Control (FMAC) is an ongoing project intended to enhance the Sun Microsystems OpenSolaris operating platform by adding two security technologies: Flux Advanced Security Kernel (Flask) and Type Enforcement (TE). Because the security features of FMAC are difficult to bypass, it is of particular interest to government and military agencies. FMAC is based on source code consistent with OpenSolaris OS/Net.

Flask provides a flexible security interface that does not require system modification. The security server employs multi-level, easily-updated policy rules that can be customized to meet the needs of diverse users and can be configured to achieve specific security goals. TE is independent of external privilege parameters and enforces user-defined access rules. An important advantage of TE is its ability to identify and isolate malware, defective application programs and compromised software on a system-wide basis.

The FMAC project is staffed primarily by the U.S. National Security Agency (NSA) and Sun Microsystems.

 

Learn More About IT:
> Sun Microsystems outlines the basics of the FMAC project.
> Glenn Faden points out some challenges facing the FMAC project.

This was last updated in November 2008

Start the conversation

Send me notifications when other members comment.

Please create a username to comment.

-ADS BY GOOGLE

File Extensions and File Formats

Powered by:

SearchCompliance

SearchSecurity

SearchHealthIT

SearchDisasterRecovery

  • business continuity plan (BCP)

    A business continuity plan (BCP) is a document that consists of the critical information an organization needs to continue ...

  • disaster recovery team

    A disaster recovery team is a group of individuals focused on planning, implementing, maintaining, auditing and testing an ...

  • cloud insurance

    Cloud insurance is any type of financial or data protection obtained by a cloud service provider. 

SearchStorage

  • RAID 6 (redundant array of independent disks)

    RAID 6, also known as double-parity RAID, uses two parity stripes on each disk. It allows for two disk failures within the RAID ...

  • hard disk drive (HDD)

    A computer hard disk drive (HDD) is a non-volatile memory hardware device that controls the positioning, reading and writing of ...

  • byte

    In most computer systems, a byte is a unit of data that is eight binary digits long. Bytes are often used to represent a ...

Close