PitBull can Secure Microsoft Applications on a Multilevel Secure (MLS) Desktop !!!


こんな記事がいつのまにか
PitBullにもラベルつきX Window が搭載ですねえ


PitBull can Secure Microsoft Applications on a Multilevel Secure (MLS) Desktop !!!
http://www.argus-systems.com/home7.shtml

・Organizations and employees want to use (or need to use) Microsoft applications
Microsoft applications are the primary target for hackers and automated tools
・Compromised applications can attack other applications and damage the operating system


内容はどちらも同じ


PDF版
http://www.argus-systems.com/mlsdesktop.pdf
PowerPoint
http://www.argus-systems.com/mlsdesktop.ppt


資料を見たらWindows上ではなくて、SolarisでWINEを動かしてアプリごとにラベルづけするやつでした。

High-altitude View of the Solution


Intel x86 hardware
・Sun Solaris 10 operating system
X Window desktop
・Argus PitBull security enhancements for Solaris and X Window
・Codeweaver/WINE to support Microsoft applications
・Standard out-of-the-box Microsoft applications

こっちのニュースは、Trusted Solaris8 の環境をSolaris10に移行するなら、ゾーンにラベルをつけるMLSになったTrusted Extensionsより、伝統的なMLSを継承しているPitBull for Solaris10のほうがいいよっていう記事


A logical and smooth migration path from TSOL 8 to Multilevel Security on Solaris 10 x86/x64 and SPARC
http://www.argus-systems.com/home6.shtml

PitBull Foundation for Solaris 10 includes all features from its earlier versions, and Argus integrated the TSOL components of standard Solaris 10 into the PitBull Foundation design, thus creating a hybrid system that fully supports both standard Solaris 10 and the PitBull Foundation security technologies. In addition, Argus added new security capabilities that had not been available in earlier versions.

Trusted Solaris, Sun Microsystems’ trusted operating system in most versions of Solaris up through Solaris 8, has been widely used in intelligence and military environments. Designed based on traditional MLS technology, TSOL provided per-file MLS capabilities. TSOL, however, is not available for Solaris 10. Limited MLS functionality is available through Sun’s Trusted Extension (TE) technology, but TE ties labeling and MLS capabilities to the new Solaris Zones rather than to individual file system objects. Sites needing the same level of MLS support found on TSOL will be able to find that on PitBull Foundation for Solaris 10.


そのポイントは

Specific compatibilities include:
・Use of the same MITRE Label Encodings file.
・Per-file and per-directory security labels as found in TSOL.
・A tar extraction program that allows TSOL for Solaris 8 tar files to be extracted with their TSOL security labels preserved on the PBFD system.
・Full compatibility with TSOL privileges as incorporated into standard Solaris 10. PBFD privileges can be used simultaneously with TSOL privileges.