%!PS %%Version: 3.3.1 %%DocumentFonts: (atend) %%Pages: (atend) %%EndComments % % Version 3.3.1 prologue for troff files. % /#copies 1 store /aspectratio 1 def /formsperpage 1 def /landscape false def /linewidth .3 def /magnification 1 def /margin 0 def /orientation 0 def /resolution 720 def /rotation 1 def /xoffset 0 def /yoffset 0 def /roundpage true def /useclippath true def /pagebbox [0 0 612 792] def /R /Times-Roman def /I /Times-Italic def /B /Times-Bold def /BI /Times-BoldItalic def /H /Helvetica def /HI /Helvetica-Oblique def /HB /Helvetica-Bold def /HX /Helvetica-BoldOblique def /CW /Courier def /CO /Courier def /CI /Courier-Oblique def /CB /Courier-Bold def /CX /Courier-BoldOblique def /PA /Palatino-Roman def /PI /Palatino-Italic def /PB /Palatino-Bold def /PX /Palatino-BoldItalic def /Hr /Helvetica-Narrow def /Hi /Helvetica-Narrow-Oblique def /Hb /Helvetica-Narrow-Bold def /Hx /Helvetica-Narrow-BoldOblique def /KR /Bookman-Light def /KI /Bookman-LightItalic def /KB /Bookman-Demi def /KX /Bookman-DemiItalic def /AR /AvantGarde-Book def /AI /AvantGarde-BookOblique def /AB /AvantGarde-Demi def /AX /AvantGarde-DemiOblique def /NR /NewCenturySchlbk-Roman def /NI /NewCenturySchlbk-Italic def /NB /NewCenturySchlbk-Bold def /NX /NewCenturySchlbk-BoldItalic def /ZD /ZapfDingbats def /ZI /ZapfChancery-MediumItalic def /S /S def /S1 /S1 def /GR /Symbol def /inch {72 mul} bind def /min {2 copy gt {exch} if pop} bind def /setup { counttomark 2 idiv {def} repeat pop landscape {/orientation 90 orientation add def} if /scaling 72 resolution div def linewidth setlinewidth 1 setlinecap pagedimensions xcenter ycenter translate orientation rotation mul rotate width 2 div neg height 2 div translate xoffset inch yoffset inch neg translate margin 2 div dup neg translate magnification dup aspectratio mul scale scaling scaling scale addmetrics 0 0 moveto } def /pagedimensions { useclippath userdict /gotpagebbox known not and { /pagebbox [clippath pathbbox newpath] def roundpage currentdict /roundpagebbox known and {roundpagebbox} if } if pagebbox aload pop 4 -1 roll exch 4 1 roll 4 copy landscape {4 2 roll} if sub /width exch def sub /height exch def add 2 div /xcenter exch def add 2 div /ycenter exch def userdict /gotpagebbox true put } def /addmetrics { /Symbol /S null Sdefs cf /Times-Roman /S1 StandardEncoding dup length array copy S1defs cf } def /pagesetup { /page exch def currentdict /pagedict known currentdict page known and { page load pagedict exch get cvx exec } if } def /decodingdefs [ {counttomark 2 idiv {y moveto show} repeat} {neg /y exch def counttomark 2 idiv {y moveto show} repeat} {neg moveto {2 index stringwidth pop sub exch div 0 32 4 -1 roll widthshow} repeat} {neg moveto {spacewidth sub 0.0 32 4 -1 roll widthshow} repeat} {counttomark 2 idiv {y moveto show} repeat} {neg setfunnytext} ] def /setdecoding {/t decodingdefs 3 -1 roll get bind def} bind def /w {neg moveto show} bind def /m {neg dup /y exch def moveto} bind def /done {/lastpage where {pop lastpage} if} def /f { dup /font exch def findfont exch dup /ptsize exch def scaling div dup /size exch def scalefont setfont linewidth ptsize mul scaling 10 mul div setlinewidth /spacewidth ( ) stringwidth pop def } bind def /changefont { /fontheight exch def /fontslant exch def currentfont [ 1 0 fontheight ptsize div fontslant sin mul fontslant cos div fontheight ptsize div 0 0 ] makefont setfont } bind def /sf {f} bind def /cf { dup length 2 idiv /entries exch def /chtab exch def /newencoding exch def /newfont exch def findfont dup length 1 add dict /newdict exch def {1 index /FID ne {newdict 3 1 roll put}{pop pop} ifelse} forall newencoding type /arraytype eq {newdict /Encoding newencoding put} if newdict /Metrics entries dict put newdict /Metrics get begin chtab aload pop 1 1 entries {pop def} for newfont newdict definefont pop end } bind def % % A few arrays used to adjust reference points and character widths in some % of the printer resident fonts. If square roots are too high try changing % the lines describing /radical and /radicalex to, % % /radical [0 -75 550 0] % /radicalex [-50 -75 500 0] % % Move braceleftbt a bit - default PostScript character is off a bit. % /Sdefs [ /bracketlefttp [201 500] /bracketleftbt [201 500] /bracketrighttp [-81 380] /bracketrightbt [-83 380] /braceleftbt [203 490] /bracketrightex [220 -125 500 0] /radical [0 0 550 0] /radicalex [-50 0 500 0] /parenleftex [-20 -170 0 0] /integral [100 -50 500 0] /infinity [10 -75 730 0] ] def /S1defs [ /underscore [0 80 500 0] /endash [7 90 650 0] ] def % % Tries to round clipping path dimensions, as stored in array pagebbox, so they % match one of the known sizes in the papersizes array. Lower left coordinates % are always set to 0. % /roundpagebbox { 7 dict begin /papersizes [8.5 inch 11 inch 14 inch 17 inch] def /mappapersize { /val exch def /slop .5 inch def /diff slop def /j 0 def 0 1 papersizes length 1 sub { /i exch def papersizes i get val sub abs dup diff le {/diff exch def /j i def} {pop} ifelse } for diff slop lt {papersizes j get} {val} ifelse } def pagebbox 0 0 put pagebbox 1 0 put pagebbox dup 2 get mappapersize 2 exch put pagebbox dup 3 get mappapersize 3 exch put end } bind def %%EndProlog %%BeginSetup mark /linewidth 0.5 def /xoffset 0 def /yoffset 0 def /#copies 1 store /magnification 1 def %%FormsPerPage: 1 /formsperpage 1 def /landscape false def /resolution 720 def setup 2 setdecoding %%EndSetup %%Page: 1 1 /saveobj save def mark 1 pagesetup 12 B f (The IX Multilevel-Secure UNIX System)4 2033 1 1863 1230 t 10 I f (J. A. Reeds)2 443 1 2658 1470 t (M. D. McIlroy)2 576 1 2592 1650 t (ABSTRACT)2643 2090 w 10 R f ( a simple but comprehensive multilevel-secure operating)6 2299(A collection of papers about the IX system,)7 1771 2 970 2506 t (system with mandatory access control, based on the research v10)9 2600 1 720 2626 t 9 R f (UNIX)3343 2626 w 10 S f (\322)3568 2626 w 10 R f (system.)3672 2626 w ( processes and files or channels \(not on ``subjects'' and ``objects''\).)10 2732(The IX security model centers on)5 1338 2 970 2782 t ( classified as highly as)4 923(The system calculates security-classification labels dynamically, so that outputs are)9 3397 2 720 2902 t ( label mechanism is)3 812( The)1 212( from which they were derived.)5 1287(the inputs)1 398 4 720 3022 t 10 I f (mandatory)3461 3022 w 10 R f (; not even the superuser can)5 1146 1 3894 3022 t (subvert it.)1 400 1 720 3142 t ( system and security administrators to bend the rules in an)10 2400(A structured privilege mechanism allows)4 1670 2 970 3298 t ( may be suballocated)3 846( Privilege)1 413(orderly way for purposes such as maintenance or document declassification.)9 3061 3 720 3418 t (in parts of the label space so that projects may administer their own security.)13 3062 1 720 3538 t ( communica-)1 534(A private-channel mechanism guarantees freedom from eavesdropping or spoofing for)9 3536 2 970 3694 t (tions among trusted processes and for special communications, such as password dialogs, with external)13 4320 1 720 3814 t (sources.)720 3934 w (The papers in the collection are)5 1255 1 970 4090 t 10 I f (Multilevel Security in the)3 1007 1 720 4246 t 9 I f (UNIX)1750 4246 w 10 I f (Tradition.)1985 4246 w 10 R f ( pages.)1 277( 19)1 150(An overview of the IX system and important utilities.)8 2140 3 2439 4246 t 10 I f (The Design of IX.)3 705 1 720 4402 t 10 R f ( pages.)1 277( 32)1 150(Detailed specification of the security behavior of the kernel.)8 2397 3 1475 4402 t 10 I f (A Tour of IX.)3 528 1 720 4558 t 10 R f ( pages.)1 277( 11)1 150(Some examples of the use of security labels and of privilege in IX.)12 2665 3 1298 4558 t 10 I f (Multilevel Windows on a Single-Level Terminal.)5 2033 1 720 4714 t 10 R f (The workings of)2 698 1 2822 4714 t 10 I f (mux,)3564 4714 w 10 R f (a windowed-terminal handler,)2 1240 1 3800 4714 t ( pages.)1 277( 3)1 100(when it is possible for run differently classified sessions in different windows.)11 3124 3 720 4834 t 10 I f (Secure IX Network.)2 785 1 720 4990 t 10 R f ( to a)2 180(A discussion of the major security features of IX and how they could be extended)14 3302 2 1558 4990 t ( pages.)1 277( 8)1 100(network of secure computers.)3 1180 3 720 5110 t 10 B f (Appendix.)720 5266 w 10 I f (Glossary.)720 5422 w 10 R f (The jargon of IX that differs from that of)8 1635 1 1156 5422 t 9 R f (UNIX)2814 5422 w 10 R f ( pages.)1 277(. 2)1 125 2 3039 5422 t 10 I f (Manual Pages.)1 605 1 720 5578 t 10 R f (Features peculiar to IX described in the classical)7 1937 1 1375 5578 t 9 R f (UNIX)3335 5578 w 10 R f ( pages.)1 277(style. 50)1 364 2 3585 5578 t cleartomark showpage saveobj restore %%EndPage: 1 1 %%Trailer done %%Pages: 1 %%DocumentFonts: Times-Bold Times-Italic Times-Roman Symbol