Label ranges set limits on:
The labels at which hosts can send and receive information
The labels at which processes acting on behalf of users and roles can access files and directories within file systems
The labels at which users can allocate devices, thereby restricting the labels at which files can be written to storage media in these devices
The labels at which users can send jobs to printers
The labels at which users can log into workstations--in addition to the user's label range, a label range on the frame buffer may be used to restrict access
Labels are automatically assigned to email messages and printed on printer output.