Page 289

The University of SydneyPage 36Issues with Bell-La Padula–Can a corporal in “unclassified” level overwrite a war plan at ”Top Secret” level?–Yesaccording to *-property.–This does not compromise confidentiality, but obviously violates integrity. –Covert channel information flow is not protected.–E.g.Inferring what is in while attempting to write multiple times–Does not address management of access control, because there is no mechanism to modify access rights.–The model does not address file sharing used in modern systems.