View source for LOMAC

{{for-multi|the defunct computer company|Logical Machine Corporation|the computer game|Lock On: Modern Air Combat}}

'''Low Water-Mark Mandatory Access Control (LOMAC)''' is a Mandatory Access Control model which protects the integrity of system objects and subjects by means of an information flow policy coupled with the subject demotion via floating labels.  In LOMAC, all system subjects and objects are assigned integrity labels, made up of one or more hierarchical grades, depending on their types. Together, these label elements permit all labels to be placed in a partial order, with information flow protections and demotion decisions based on a dominance operator describing the order.

== Implementations ==
* In [[FreeBSD]], the Biba model is implemented by the mac_lomac MAC policy.<ref>{{Cite web|url=http://man.freebsd.org/mac_lomac|title = Mac_lomac}}</ref>
* In [[Linux]], there is a project that attempts to implement LOMAC policy.<ref>{{Cite web|url=http://freshmeat.net/projects/lomac|title = LOMAC}}</ref>

== See also ==
* [[Multi-Level Security]] — MLS
* [[Mandatory Access Control]] — MAC
* [[Discretionary access control|Discretionary Access —]] DAC
* [[Take-Grant Model]]
* [[The Clark-Wilson Integrity Model]]
* [[Graham-Denning Model]]
* [[Security Modes|Security Modes of Operation]]

==References==
{{Reflist}}
* Security Engineering, Ross Anderson ({{ISBN|0-471-38922-6}})

==External links==
* [http://alum.wpi.edu/~tfraser/Software/LOMAC The LOMAC project]
* {{Freshmeat|lomac|LOMAC}}

[[Category:Computer security models]]
[[Category:Computer access control]]


{{security-software-stub}}
{{linux-stub}}