1 # 2 # Multi-Level Security translation table for SELinux 3 # 4 # Uncomment the following to disable translation libary 5 # disable=1 6 # 7 # Objects can be labeled with one of 16 levels and be categorized with 0-1023 8 # categories defined by the admin. 9 # Objects can be in more than one category at a time. 10 # Users can modify this table to translate the MLS labels for different purpose. 11 # 12 # Assumptions: using below MLS labels. 13 # SystemLow 14 # SystemHigh 15 # Unclassified 16 # Secret with compartments A and B. 17 # 18 # SystemLow and SystemHigh 19 s0=SystemLow 20 s15:c0.c1023=SystemHigh 21 s0-s15:c0.c1023=SystemLow-SystemHigh 22 23 # Unclassified level 24 s1=Unclassified 25 26 # Secret level with compartments 27 s2=Secret 28 s2:c0=A 29 s2:c1=B 30 31 # ranges for Unclassified 32 s0-s1=SystemLow-Unclassified 33 s1-s2=Unclassified-Secret 34 s1-s15:c0.c1023=Unclassified-SystemHigh 35 36 # ranges for Secret with compartments 37 s0-s2=SystemLow-Secret 38 s0-s2:c0=SystemLow-Secret:A 39 s0-s2:c1=SystemLow-Secret:B 40 s0-s2:c0,c1=SystemLow-Secret:AB 41 s1-s2:c0=Unclassified-Secret:A 42 s1-s2:c1=Unclassified-Secret:B 43 s1-s2:c0,c1=Unclassified-Secret:AB 44 s2-s2:c0=Secret-Secret:A 45 s2-s2:c1=Secret-Secret:B 46 s2-s2:c0,c1=Secret-Secret:AB 47 s2-s15:c0.c1023=Secret-SystemHigh 48 s2:c0-s2:c0,c1=Secret:A-Secret:AB 49 s2:c0-s15:c0.c1023=Secret:A-SystemHigh 50 s2:c1-s2:c0,c1=Secret:B-Secret:AB 51 s2:c1-s15:c0.c1023=Secret:B-SystemHigh 52 s2:c0,c1-s15:c0.c1023=Secret:AB-SystemHigh 53