mcs(8) mcs documentation mcs(8)NAME
mcs - Multi-Category System
DESCRIPTION
MCS (Multiple Category System) allows users to label files on their system within administrator defined categories. It then uses SELinux
Mandatory Access Control to protect those files. MCS is a discretionary model to allow users to mark their data with additional tags that
further restrict access. The only mandatory aspect is authorizing users for categories by defining their clearance in policy. However,
MCS is similar to MLS and exercises the same code paths and share the same support infrastructure. They just differ in their specific con-
figuration.
The /etc/selinux/{SELINUXTYPE}/setrans.conf configuration file translates the labels on disk to human readable form. Administrators can
define any labels they want in this file. Certain applications like printing and auditing will use these labels to identify the files. By
setting a category on a file you will prevent other applications/services from having access to the files.
Examples of file labels would be PatientRecord, CompanyConfidential etc.
SEE ALSO selinux(8), chcon(1)FILES
/etc/selinux/{SELINUXTYPE}/setrans.conf
dwalsh@redhat.com 8 Sep 2005 mcs(8)
Check Out this Related Man Page
CHCAT(8) User Commands CHCAT(8)NAME
chcat - change file SELinux security category
SYNOPSIS
chcat category file...
chcat -l category user...
chcat [[+|-]category...] file...
chcat -l [[+|-]category...] user...
chcat [-d] file...
chcat -l [-d] user...
chcat -L [ -l ] [ user ... ]
DESCRIPTION
Change/Remove the security category for each file or user.
Use +/- to add/remove categories from a file or user.
Note: When removing a category you must specify '--' on the command line before using the -Category syntax. This tells the command that
you have finished entering options and are now specifying a category name instead.
-d delete the category from each FILE/USER.
-L list available categories.
-l Tells chcat to operate on users instead of files.
SEE ALSO chcon(1), selinux(8), semanage(8)
When operating on files this script wraps the chcon command.
FILES
/etc/selinux/{SELINUXTYPE}/setrans.conf
/etc/selinux/{SELINUXTYPE}/seusers
chcat September 2005 CHCAT(8)
Hi,
I need to add some comments in the generated executables ( exes and .sl ).
I used to use mcs command in solaris.
What is the equivalent in HP.
On googling and searching the HP site, it gave me to a link of STK for HP from True64, which isn't working.
Is there any substitute or... (5 Replies)