centos man page for mcs

mcs(8)								 mcs documentation							    mcs(8)

NAME
       mcs - Multi-Category System

DESCRIPTION
       MCS  (Multiple  Category System) allows users to label files on their system within administrator defined categories.  It then uses SELinux
       Mandatory Access Control to protect those files.   MCS is a discretionary model to allow users to mark their data with additional tags that
       further	restrict  access.   The only mandatory aspect is authorizing users for categories by defining their clearance in policy.  However,
       MCS is similar to MLS and exercises the same code paths and share the same support infrastructure.  They just differ in their specific con-
       figuration.

       The  /etc/selinux/{SELINUXTYPE}/setrans.conf  configuration file translates the labels on disk to human readable form.	Administrators can
       define any labels they want in this file.  Certain applications like printing and auditing will use these labels to identify the files.	By
       setting	a  category on a file you will prevent other applications/services from having access to the files.  Examples of file labels would
       be PatientRecord, CompanyConfidential etc.

SEE ALSO
       selinux(8), chcon(1)

FILES
       /etc/selinux/{SELINUXTYPE}/setrans.conf

dwalsh@redhat.com						    8 Sep 2005								    mcs(8)