1)      Recall that Multics had 8 protection rings, with 0 being
	the most privileged and rings 4-7 reserved for application use.
	In which ring do you think access control should live?  Explain.

2)	I assert that it is possible to implement MAC security labels
	using only compartments, rather than a level and compartments,
	while stil preserving the same semantics.

	a) Show the design of such a system
	b) Why do we use explcit levels instead of this scheme?

3)	Many games on Unix are setUID, to protect the design of the
	game, to prevent cheating, and to safeguard the integrity of the
	scorefile, which keeps track of the top players.  Should such
	games be setUID root, or to some other ID?  If the latter,
	should all games share a common owner, or should there be one
	userid per game?  Explain.