The role DP-model of access and information flows control in operating systems of Linux sets

In this article, the basic role DP-model of access and information flows control in operating systems (OS) is presented completing the role DP-model for OS of Linux set. New features of the basic role DP-model described in the article are the following: the names of entities, mandatory integrity attributes of entities-containers, and the function of de-facto ownership. The main difference of the model is the strong separation of the de-jure state transformation rules (requiring implementation in OS) and the de-facto rules (used only for the analysis of system security conditions). It is proved that the using only monotonic state transformation rules is sufficient for analysing conditions of transfering role access rights, of access to entities, and of realizing information flows in OS.