CMW Labels

CMW Labels control access to and maintain the classification of data. All processes and objects have a CMW label with two portions: the sensitivity label portion for mandatory access control (MAC) decisions, and the information label portion to identify the true sensitivity of the data.

Chapter 4, Labels describes programming interfaces that do the following.

• Get and set file and process labels.

• Get file system label ranges.

• Initialize labels.

• Find the greatest lower bound or least upper bound between two levels.

• Compare levels for dominance and equality.

• Check and set binary label types.

• Convert labels between binary and text or hexadecimal.

• Check that a sensitivity label is valid and within the system or user accreditation range.

• Get information from the label_encodings(4) file. This file is set up and maintained by the system administrator and contains the label definitions for the system.