Home | History | Annotate | Download | only in default
      1 #
      2 # Multi-Level Security translation table for SELinux
      3 # 
      4 # Uncomment the following to disable translation libary
      5 # disable=1
      6 #
      7 # Objects can be labeled with one of 16 levels and be categorized with 0-1023 
      8 # categories defined by the admin.
      9 # Objects can be in more than one category at a time.
     10 # Users can modify this table to translate the MLS labels for different purpose.
     11 #
     12 # Assumptions: using below MLS labels.
     13 #  SystemLow
     14 #  SystemHigh
     15 #  Unclassified 
     16 #  Secret with compartments A and B.
     17 # 
     18 # SystemLow and SystemHigh
     19 s0=SystemLow
     20 s15:c0.c1023=SystemHigh
     21 s0-s15:c0.c1023=SystemLow-SystemHigh
     22 
     23 # Unclassified level
     24 s1=Unclassified
     25 
     26 # Secret level with compartments
     27 s2=Secret
     28 s2:c0=A
     29 s2:c1=B
     30 
     31 # ranges for Unclassified
     32 s0-s1=SystemLow-Unclassified
     33 s1-s2=Unclassified-Secret
     34 s1-s15:c0.c1023=Unclassified-SystemHigh
     35 
     36 # ranges for Secret with compartments
     37 s0-s2=SystemLow-Secret
     38 s0-s2:c0=SystemLow-Secret:A
     39 s0-s2:c1=SystemLow-Secret:B
     40 s0-s2:c0,c1=SystemLow-Secret:AB
     41 s1-s2:c0=Unclassified-Secret:A
     42 s1-s2:c1=Unclassified-Secret:B
     43 s1-s2:c0,c1=Unclassified-Secret:AB
     44 s2-s2:c0=Secret-Secret:A
     45 s2-s2:c1=Secret-Secret:B
     46 s2-s2:c0,c1=Secret-Secret:AB
     47 s2-s15:c0.c1023=Secret-SystemHigh
     48 s2:c0-s2:c0,c1=Secret:A-Secret:AB
     49 s2:c0-s15:c0.c1023=Secret:A-SystemHigh
     50 s2:c1-s2:c0,c1=Secret:B-Secret:AB
     51 s2:c1-s15:c0.c1023=Secret:B-SystemHigh
     52 s2:c0,c1-s15:c0.c1023=Secret:AB-SystemHigh
     53