Интерактивная система просмотра системных руководств (man-ов)
>> maclabel (7) ( FreeBSD man: Макропакеты и соглашения )
- Mandatory Access Control label format
If Mandatory Access Control, or MAC, is enabled in the kernel,
then in addition to the traditional credentials,
(typically a user or a socket)
(file system object, socket, etc.)
is given a
The MAC label specifies the necessary subject-specific or
object-specific information necessary for a MAC security policy
to enforce access control on the subject/object.
The format for a MAC label is defined as follows:
A MAC label consists of a policy name,
followed by a forward slash,
followed by the subject or object's qualifier,
optionally followed by a comma and one or more additional policy labels.
This software was contributed to the
Fx Project by NAI Labs, the Security Research Division of Network Associates
Inc. under DARPA/SPAWAR contract N66001-01-C-8035
as part of the DARPA CHATS research program.