Does initial setting of rules-table need FMT_MSA.3?



I am confused in that FDP_IFF has a dependency on FMT_MSA.3 (Static
attribute initialisation).

As we know, attributes of the information is said to stay with the
information as it flows.
So, those attributes are not ones provided with restrictive/permissive
default values by the TSF.

Then, why FDP_IFF has a dependency on FMT_MSA.3?

We know, FDP_IFF permits an information-flow according to the rules that are
based on attributes.
So, it is natural to suppose that there is a requirement of initial rules
setting (that is restrictive or permissive).

For this rules setting, I thought, FMT_MTD (Management of TSF data) could be
used.

I thought, setting rules does not mean "Management of security attributes"
or "Static attribute initialisation", but means "Management of TSF data"..

Rules are not attributes, but TSF data, aren't they?

Am I wrong?

Yokota


Date Index | Thread Index | Problems or questions? Contact list-master@nist.gov