This paper presents a visual language called Miro for specifying and restricting operating system security configurations. A Miro picture specifies exactly what rights users have on files. A Miro constraint, also stated visually, restricts the set of Miro pictures which are considered legal. Such constraints on pictures give an exact specification of security policies and a practical method for...
