Actually, with MLS authorized personnel can write down. That's necessary in order to provide unclassified summaries of classified data.
-- Shmuel (Seymour J.) Metz http://mason.gmu.edu/~smetz3 ________________________________________ From: IBM Mainframe Discussion List <[email protected]> on behalf of John McKown <[email protected]> Sent: Friday, June 28, 2019 9:05 AM To: [email protected] Subject: Re: Dataset encryption question On Fri, Jun 28, 2019 at 6:39 AM Mark Jacobs < [email protected]> wrote: > Outside of using dataset conditional access rules is there anyway to > prevent someone from copying encrypted dataset HLQ1.data to HLQ2.data? They > have access rights to both HLQ's and the encryption key. > Multi Level Security? Or maybe Security Labels? I don't really know anything except that these things exist. And that, at least with MLS, you cannot "write down", but you can "write up". I.e. you cannot copy from high security to low, but under the proper conditions you can copy from low to high./ > > Mark Jacobs > > Sent from > [ProtonMail](https://secure-web.cisco.com/1txoMZpSb-ahi31O6HAWes_jGBZbERambAQnttY2AAdHLcdXuKjalU7qn-fWMqtX65wNjjW4zmxkee3yKgE5kHJiqQN27Qk9uW_Jt6xnv7b5njJLcN6y0w1V4KUK_OFvAMtbZpzG4Pr_XZNjMM2pKhoA5oxJBRGsD0U_Zm2jsmJTW_alztQlPBK9QVHaf-iSvTvV_amELiVNGws8HrNQm5ck0wlYh1Pth3Q32hzBwhI4LosVizwBVpfAa0f784Se_sOie4YiklXMxeYGc_xQ-DD8fCJVcHLJ1j6ezivSD4dZBF5OowLtzVz9fhNt63pHENpo3cre7wsj1A11It-Np1pFHEa0d7eSlOyyo7LPFaBWKUglxz621Yso8IhjEydSWN3kXyPt-KL68hEqi5Cit4BPTAU7DIqz2DDYS6dcltgnLHkyw3rUbwnPTUda4UPIL/https%3A%2F%2Fprotonmail.com), > Swiss-based encrypted > email. > > GPG Public Key - > https://secure-web.cisco.com/1Mp0E3a5FcJFPDOMRfelxhA9iqDxiGRbUzi-eGWfJ1npi9ldx-SWHr3ajQQrv55KgkNDwdRbRvR2BwgpdX-IICeH5L0OLB2ykNEsW2NKR4a4XtGq0jrososfhCEiiAay3xkSHUGdFeiC-htw12j7_RegP0_Fng6nZtytXtA0hArTTvMrPPT4qZy5bYqc7iIXwNnI5SBwf4MtFmP_9jiD4EomEuwljmiIbnph-eWbYE1VoI9GjKO18EX5cUUkJl0RXdHvyg8U8lB3svWCUVrMwbrrXegEo9vrMVQ5lDdr-JcUOblyMnhJzwEHbVHTZXpH1SrnWp2MVOya0ezsKztwLGvbR4fk7kVplXbv1O9Ktr0DeH6wkHrvt6kIDaLf3s7CMEbGX4HD7Vb6G5dihUJ7Fm1yZusBylF8aAtdWexzX_bJyXd_9R89weAiCkRicE1NE/https%3A%2F%2Fapi.protonmail.ch%2Fpks%2Flookup%3Fop%3Dget%26search%3Dmarkjacobs%40protonmail.com > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to [email protected] with the message: INFO IBM-MAIN > -- Money is the root of all evil. Evil is the root of all money. With that in mind, money is made by the government ... Maranatha! <>< John McKown ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
