xref: /aosp_15_r20/external/selinux/mcstrans/share/examples/default/setrans.conf (revision 2d543d20722ada2425b5bdab9d0d1d29470e7bba)
1*2d543d20SAndroid Build Coastguard Worker#
2*2d543d20SAndroid Build Coastguard Worker# Multi-Level Security translation table for SELinux
3*2d543d20SAndroid Build Coastguard Worker#
4*2d543d20SAndroid Build Coastguard Worker# Uncomment the following to disable translation library
5*2d543d20SAndroid Build Coastguard Worker# disable=1
6*2d543d20SAndroid Build Coastguard Worker#
7*2d543d20SAndroid Build Coastguard Worker# Objects can be labeled with one of 16 levels and be categorized with 0-1023
8*2d543d20SAndroid Build Coastguard Worker# categories defined by the admin.
9*2d543d20SAndroid Build Coastguard Worker# Objects can be in more than one category at a time.
10*2d543d20SAndroid Build Coastguard Worker# Users can modify this table to translate the MLS labels for different purpose.
11*2d543d20SAndroid Build Coastguard Worker#
12*2d543d20SAndroid Build Coastguard Worker# Assumptions: using below MLS labels.
13*2d543d20SAndroid Build Coastguard Worker#  SystemLow
14*2d543d20SAndroid Build Coastguard Worker#  SystemHigh
15*2d543d20SAndroid Build Coastguard Worker#  Unclassified
16*2d543d20SAndroid Build Coastguard Worker#  Secret with compartments A and B.
17*2d543d20SAndroid Build Coastguard Worker#
18*2d543d20SAndroid Build Coastguard Worker# SystemLow and SystemHigh
19*2d543d20SAndroid Build Coastguard Workers0=SystemLow
20*2d543d20SAndroid Build Coastguard Workers15:c0.c1023=SystemHigh
21*2d543d20SAndroid Build Coastguard Workers0-s15:c0.c1023=SystemLow-SystemHigh
22*2d543d20SAndroid Build Coastguard Worker
23*2d543d20SAndroid Build Coastguard Worker# Unclassified level
24*2d543d20SAndroid Build Coastguard Workers1=Unclassified
25*2d543d20SAndroid Build Coastguard Worker
26*2d543d20SAndroid Build Coastguard Worker# Secret level with compartments
27*2d543d20SAndroid Build Coastguard Workers2=Secret
28*2d543d20SAndroid Build Coastguard Workers2:c0=A
29*2d543d20SAndroid Build Coastguard Workers2:c1=B
30*2d543d20SAndroid Build Coastguard Worker
31*2d543d20SAndroid Build Coastguard Worker# ranges for Unclassified
32*2d543d20SAndroid Build Coastguard Workers0-s1=SystemLow-Unclassified
33*2d543d20SAndroid Build Coastguard Workers1-s2=Unclassified-Secret
34*2d543d20SAndroid Build Coastguard Workers1-s15:c0.c1023=Unclassified-SystemHigh
35*2d543d20SAndroid Build Coastguard Worker
36*2d543d20SAndroid Build Coastguard Worker# ranges for Secret with compartments
37*2d543d20SAndroid Build Coastguard Workers0-s2=SystemLow-Secret
38*2d543d20SAndroid Build Coastguard Workers0-s2:c0=SystemLow-Secret:A
39*2d543d20SAndroid Build Coastguard Workers0-s2:c1=SystemLow-Secret:B
40*2d543d20SAndroid Build Coastguard Workers0-s2:c0,c1=SystemLow-Secret:AB
41*2d543d20SAndroid Build Coastguard Workers1-s2:c0=Unclassified-Secret:A
42*2d543d20SAndroid Build Coastguard Workers1-s2:c1=Unclassified-Secret:B
43*2d543d20SAndroid Build Coastguard Workers1-s2:c0,c1=Unclassified-Secret:AB
44*2d543d20SAndroid Build Coastguard Workers2-s2:c0=Secret-Secret:A
45*2d543d20SAndroid Build Coastguard Workers2-s2:c1=Secret-Secret:B
46*2d543d20SAndroid Build Coastguard Workers2-s2:c0,c1=Secret-Secret:AB
47*2d543d20SAndroid Build Coastguard Workers2-s15:c0.c1023=Secret-SystemHigh
48*2d543d20SAndroid Build Coastguard Workers2:c0-s2:c0,c1=Secret:A-Secret:AB
49*2d543d20SAndroid Build Coastguard Workers2:c0-s15:c0.c1023=Secret:A-SystemHigh
50*2d543d20SAndroid Build Coastguard Workers2:c1-s2:c0,c1=Secret:B-Secret:AB
51*2d543d20SAndroid Build Coastguard Workers2:c1-s15:c0.c1023=Secret:B-SystemHigh
52*2d543d20SAndroid Build Coastguard Workers2:c0,c1-s15:c0.c1023=Secret:AB-SystemHigh
53