MAC and DAC and the combination

["YOKOTA HIROFUMI" <yokota-hirofumi@jqa.jp>]

Hi,

What is MAC? and What is DAC?
I suppose, new generations and IT security beginners are having fewer
chances to learn those terms in-depth.
And, I would say, it is very hard to read those terms, especially when they
are used in combination as follows.

--------------------------
PD-011 Attribute Inheritance/Modification Rules Need To Be Included In
Policy
The "Issue" says:
For example, one cannot use FMT_MSA to specify a rule that a Mandatory
Access Control SFP must be satisfied in order to set security attributes
controlled under a Discretionary Access Control policy. So how can this be
done?
--------------------------

Before to know how this can be done using the cc specifications, we need to
know the meaning of this MAC/DAC combination.
Namely, the meaning of the rule: that a Mandatory Access Control SFP must be
satisfied in order to set security attributes controlled under a
Discretionary Access Control policy.

Could such a rule and a situation flush into your imagination?
Could someone illustrate this, using the CC terms: i.e., subject, object,
information flow, rules, access control list, attributes, pass/deny, etc ?

Thanks advanced for your help.

Best regards,
 Hirofumi Yokota