Rules in the label_encodings(4) file may disqualify certain combinations of label components. Valid or well-formed labels are those labels that satisfy the rules.
The rules are defined by the constraints specified for each type of label, which include:
Initial compartments associated with each classification
The minimum classification, output minimum classification, and maximum classification associated with each word
Hierarchies defined by the bit patterns chosen for each word
The required combinations of words
The combination constraints that apply to the words.
A sensitivity label must be well formed. Clearances do not need to be well-formed.
If, for example, words A, B, and C are constrained from appearing together in a sensitivity label, the following table shows valid labels and clearances. Note that TS ABC is a valid clearance but is not a valid sensitivity label. The TS ABC clearance would allow a user access to files labeled with TS A, TS B, and TS C.
Table 1-11 Example of Valid Labels and Clearances|
Valid SLs |
Valid Clearances |
|
|---|---|---|
|
TS A |
TS ABC |
TS A |
|
TS B |
TS AB |
TS B |
|
TS C |
TS AC |
TS C |