Results of HSU

• Any policy that can be modelled as HRU exhibits the following two properties:

  • If commands can be restricted to a single operation each then it is possible to determine whether a given subject can ever obtain a particular right to an object.
  • If commands are not restricted to one operation then it is not always decidable whether a given protection system can confer a given right.

Notes: