Process Clearance

When a user starts an application from a workspace, the user's session clearance is set on the process and called the process clearance. The process clearance sets the upper bound to which the process can change an object's CMW label and to which the process can write data. Chapter 6, Process Clearance describes programming interfaces that do the following:

• Get and set the process clearance.

• Initialize a binary clearance.

• Find the greatest lower bound or least upper bound between two levels.

• Compare levels for dominance and equality.

• Check and set binary label types.

• Convert clearances between binary and text or hexadecimal.

• Check that a clearance is valid.