An integrity security property based on information flows : Application to the enforcement of a classical operating system