|
 |
cad203 |
#
|
|
|
cad203 |
# Multi-Level Security translation table for SELinux
|
|
|
cad203 |
#
|
|
|
cad203 |
#
|
|
|
cad203 |
# Objects can be labeled with one of 16 levels and be categorized with 0-1023
|
|
|
cad203 |
# categories defined by the admin.
|
|
|
cad203 |
# Objects can be in more than one category at a time.
|
|
|
cad203 |
# Users can modify this table to translate the MLS labels for different purpose.
|
|
|
cad203 |
#
|
|
|
cad203 |
# Assumptions: using below MLS labels.
|
|
|
cad203 |
# SystemLow
|
|
|
cad203 |
# SystemHigh
|
|
|
cad203 |
# Unclassified
|
|
|
cad203 |
# Secret with compartments A and B.
|
|
|
cad203 |
#
|
|
|
cad203 |
# SystemLow and SystemHigh
|
|
|
cad203 |
s0=SystemLow
|
|
|
cad203 |
s15:c0.c1023=SystemHigh
|
|
|
cad203 |
s0-s15:c0.c1023=SystemLow-SystemHigh
|
|
|
cad203 |
|
|
|
cad203 |
# Unclassified level
|
|
|
cad203 |
s1=Unclassified
|
|
|
cad203 |
|
|
|
cad203 |
# Secret level with compartments
|
|
|
cad203 |
s2=Secret
|
|
|
cad203 |
s2:c0=A
|
|
|
cad203 |
s2:c1=B
|
|
|
cad203 |
|
|
|
cad203 |
# ranges for Unclassified
|
|
|
cad203 |
s0-s1=SystemLow-Unclassified
|
|
|
cad203 |
s1-s2=Unclassified-Secret
|
|
|
cad203 |
s1-s15:c0.c1023=Unclassified-SystemHigh
|
|
|
cad203 |
|
|
|
cad203 |
# ranges for Secret with compartments
|
|
|
cad203 |
s0-s2=SystemLow-Secret
|
|
|
cad203 |
s0-s2:c0=SystemLow-Secret:A
|
|
|
cad203 |
s0-s2:c1=SystemLow-Secret:B
|
|
|
cad203 |
s0-s2:c0,c1=SystemLow-Secret:AB
|
|
|
cad203 |
s1-s2:c0=Unclassified-Secret:A
|
|
|
cad203 |
s1-s2:c1=Unclassified-Secret:B
|
|
|
cad203 |
s1-s2:c0,c1=Unclassified-Secret:AB
|
|
|
cad203 |
s2-s2:c0=Secret-Secret:A
|
|
|
cad203 |
s2-s2:c1=Secret-Secret:B
|
|
|
cad203 |
s2-s2:c0,c1=Secret-Secret:AB
|
|
|
cad203 |
s2-s15:c0.c1023=Secret-SystemHigh
|
|
|
cad203 |
s2:c0-s2:c0,c1=Secret:A-Secret:AB
|
|
|
cad203 |
s2:c0-s15:c0.c1023=Secret:A-SystemHigh
|
|
|
cad203 |
s2:c1-s2:c0,c1=Secret:B-Secret:AB
|
|
|
cad203 |
s2:c1-s15:c0.c1023=Secret:B-SystemHigh
|
|
|
cad203 |
s2:c0,c1-s15:c0.c1023=Secret:AB-SystemHigh
|