The CDS security architecture is built on the base system security policy provided by Reference Policy. CDS Framework provides Base Resources and Base Domains as a way to link the CDS specific items to the base system policy. Abilities can be attached to a domain to give the domain additional permissions. Commonly used Base Resources, Base Domains, and Abilities are included in the toolkit. In addition, you can create custom Base Domains, Base Resources and Abilities to achieve the CDS system's security goals.
Custom additions are created from the File menu as shown below. Select File -> New , then select one of Base Resource, Base Domain, or Ability. A wizard will guide you through creating the new customization. The customization will be created in the Custom Additions folder in the Framework Navigator and the appropriate editor opened.
©2005 - 2009 Tresys Technology, LLC
Patent Pending