DOWNGRADE Privilege (All)

If both a Table of Contents and Search form are not displayed in separate frames along with this one, you may wish to redisplay this book in a frameset, beginning with the first page.

HP OpenVMS Guide to System Security

Security for the System Administrator

Assigning Privileges

DIAGNOSE Privilege (Objects)

EXQUOTA Privilege (Devour)

DOWNGRADE Privilege (All)

The DOWNGRADE privilege permits a process to manipulate mandatoryaccess controls. The privilege lets a process write to an objectof lower secrecy, in violation of the Bell and LaPadula confinement(*) property.¹ This privilegeis reserved for enhanced security products like the Security EnhancementService software (SEVMS).

Footnotes

1
Name of the restrictionon write-downs. Multilevel security requires the complete prohibitionof write-downs by untrusted software.

( Number takes you back )

DIAGNOSE Privilege (Objects)

EXQUOTA Privilege (Devour)