Sensitivity labels control access to data and maintain the classification of data. All processes and objects have a sensitivity label that is used in MAC decisions. The labels are attributes that are interpreted by the system security policy. The system security policy is the set of rules that is enforced by system software to protect information being processed on the system.
The following sections describe how the Trusted Extensions security policy affects multilevel operations, zones, and labels.