mcs

mcs(8)                          mcs documentation                         mcs(8)



NAME
       mcs - Multi-Category System


DESCRIPTION
       MCS (Multiple Category System) allows users to label files on their
       system within administrator defined categories.  It then uses SELinux
       Mandatory Access Control to protect those files.   MCS is a discretionary
       model to allow users to mark their data with additional tags that further
       restrict access.  The only mandatory aspect is authorizing users for
       categories by defining their clearance in policy.  However, MCS is
       similar to MLS and exercises the same code paths and share the same
       support infrastructure.  They just differ in their specific
       configuration.


       The /etc/selinux/{SELINUXTYPE}/setrans.conf configuration file translates
       the labels on disk to human readable form.   Administrators can define
       any labels they want in this file.  Certain applications like printing
       and auditing will use these labels to identify the files.  By setting a
       category on a file you will prevent other applications/services from
       having access to the files.

       Examples of file labels would be PatientRecord, CompanyConfidential etc.


SEE ALSO
       selinux(8), chcon(1)


FILES
       /etc/selinux/{SELINUXTYPE}/setrans.conf



dwalsh@redhat.com                  8 Sep 2005                             mcs(8)