DOWNGRADE Privilege (All)

If both a Table of Contents and Search form are not displayed in separate frames along with this one, you may wish to redisplay this book in a frameset, beginning with the first page.

HP OpenVMS Guide to System Security

Security for the System Administrator

Assigning Privileges

DIAGNOSE Privilege (Objects)

EXQUOTA Privilege (Devour)

DOWNGRADE Privilege (All)

The DOWNGRADE privilege permits a process to manipulate mandatory access controls. The privilege lets a process write to an object of lower secrecy, in violation of the Bell and LaPadula confinement (*) property.¹ This privilege is reserved for enhanced security products like the Security Enhancement Service software (SEVMS).

Footnotes

1
Name of the restriction on write-downs. Multilevel security requires the complete prohibition of write-downs by untrusted software.

( Number takes you back )

DIAGNOSE Privilege (Objects)

EXQUOTA Privilege (Devour)