Case Study: Blue Lady Tree Collectors

Section 1
1. A discretionary system the management is set by an administrator on the system in which the administrator will award right of entry to files and programs. The administrator establishes the clearances individuals can be given. An example would be that Joe, John, Amber, and Shellie all work at company Blue Lady Tree Collectors. The company has hired an outside agency to manage the computer network as well as the files and programs. The outside agency was given the information of who needed access to what files and programs and setup access control lists for the four employees. Joe who is the owner has full rights to everything. John is a new employee that has just graduated from college and is given read only access to the files …show more content…
SELinux uses the mandatory access control and therefore it is able to control who and what has access to items within the system. But is it the most secure item out to protect systems from attack. I believe that it does do a wonderful job of protecting, but it does not give the total security that is necessary to protect. The reason why I believe that it does not give the total security that is needed is due to the fact that it is an open source system that is out there for all to see and view and know all the available vulnerabilities. If an assailant knows of an opening he or she will exploit that vulnerability to his or her gain. The ability to know the code and see where the openings are in my opinion does open the system up to an assault. Sure there are multiple ways to distribute the information on how the vulnerabilities can be solved and patched, but the idea is to make it as difficult to get in and have less of a reaction to an assault when it happens and therefore help prevent the assault altogether. The assailants are out there and have the ability to put in an assault and modify it at any given time. The ability to prevent the assault in my opinion is the best defense. If an assault can be thwarted before it starts rather than react to it after it has been discovered is a much better concept. I know SELinux is a product that was developed to be used by the NSA, but I also believe that places a greater target on it since there are assailants that are doing everything in their power to gain access to items that they believe are important and things the government has assailants want just to be able to say look what I have done and they could not stop me from getting in and out without being