Data access control based on storage validation

A device, comprising:

• a processor;
• a memory coupled to the processor;
• and
• a data storage, coupled to the processor, the data storage comprising at least one file system;
• wherein the processor, when operating:
• maintains, for each respective subject in a plurality of subjects, a set of policies controlling actions by the respective subject on at least one stored data object,
• wherein the set of policies comprises
• a policy to limit actions for passive access to stored data objects that have integrity protection for at least one of a label associated with the stored data object or for all of the data within the respective stored data object;
• receives a request for a subject to perform an action on a stored data object;
• determines that a policy for the subject limits the subject to performing the action on only stored data objects with integrity protection for at least one of labels of the stored data objects, or for all of the data within the stored data objects, wherein the policy controls actions that the subject is able to perform on specified stored data objects;
• determines, based on a determination that the policy for the subject limits the subject to performing the action on only stored data objects with integrity protection for at least one of labels of the stored data objects, or for all of the data within the stored data objects, that at least one of a label or all of the data within the stored data object has integrity protection;
• performs the action based on a determination that the at least one of the label or all of the data within the stored data object has integrity protection;
• and
• rejects the request based on a determination that the at least one of the label or all of the data within the stored data object does not have integrity protection.

A non-transitory computer readable storage medium having computer readable program code embodied therewith, the computer readable program code comprising instructions executable by a processor to:

• enforce, for each respective subject in a plurality of subjects, a set of policies controlling actions by the respective subject on at least one stored data object,
• wherein the set of policies comprises
• a policy to limit actions for passive access to stored data objects that have integrity protection for at least one of a label associated with the stored data object or for all of the data within the respective stored data object;
• receive a request for a subject to perform an action on a stored data object;
• determine that a policy for the subject limits the subject to performing the action on only stored data objects with integrity protection for at least one labels of the stored data objects or all of the data within the stored data objects, wherein the policy controls actions that the subject is able to perform on specified stored data objects;
• determine, based on a determination that the policy for the subject limits the subject to performing the action on only stored data objects with integrity protection for at least one labels of the stored data objects or all of the data within the stored data objects, that at least one of a label or all of the data within the stored data object has integrity protection;
• perform the action based on a determination that the at least one of the label or all of the data within the stored data object has integrity protection;
• and
• reject the request based on a determination that the at least one of the label or all of the data within the stored data object does not have integrity protection.