Concept - Mandatory Access Control

MAC: access based on comparing security labels (how sensitive or critical system resources are) with security clearances (whether system entities are eligible to access certain resources) (s.5). It is “mandatory” because an entity with clearance to access a resource may not, just by its own volition, enable another entity to access that resource (s.5).

• Example classification (US Government): TOP SECRET, SECRET, CONFIDENTIAL, UNCLASSIFIED (s.5).
• A concept that evolved from requirements for military information security; best covered in the context of trusted systems (s.6).

Related: Concept - Discretionary Access Control, Concept - Role-Based Access Control. Appears in 04 Access Control - Chunk 01 (s.1-28).