Renaming or Tightness: Enforcing Disjunctive Information Flow Policies

Xin Xu, Siru Tao, Kaizhen Tan

A disjunctive policy allows a value to depend on at most one of two secrets and never on both: an analyst may consult one client's file or the other's, a share of a split secret ma…