SRG-OS-000014 |
CCI-000030 |
The operating system must enforce
information flow control on metadata. |
Information flow control regulates where
information is allowed to travel within an information
system and between information systems (as opposed to who is
allowed to access the information) and without explicit
regard to subsequent accesses to the information. Metadata
is defined as data providing information about one or more
other pieces of data, such as, purpose of the data,
author/creator of the data, network location of where data
was created, and application specific data information. |