SRG-OS-000011 |
CCI-000027 |
The operating system must enforce dynamic
information flow control based on policy that must allow or
disallow information flows based upon changing conditions or
operational considerations. |
Information flow control regulates where
information is allowed to travel within an information
system and between information systems (as opposed to who is
allowed to access the information) and without explicit
regard to subsequent accesses to the information. The
operating system must enforce flow control decisions based
upon changing conditions. |