search for: getfmac

...C policies and something is not clear for me. Unless I'm doing something wrong, it seems policies are enforced only for reading, but not writing. 1) Biba I've created test file with biba/127 label: $ echo "Message" > file_biba_127.txt $ setfmac biba/127 file_biba_127.txt $ getfmac file_biba_127.txt file_biba_127.txt: biba/127,mls/low Trying to read with different labels: $ setpmac biba/high more file_biba_127.txt file_biba_127.txt: Permission denied $ setpmac biba/128 more file_biba_127.txt file_biba_127.txt: Permission denied $ setpmac biba/127 more file_biba_127.txt...