mandatory access control

A system of access control that assigns security labels or classifications to system resources and allows access only to entities (people, processes, devices) with distinct levels of authorization or clearance. These controls are enforced by the operating system or security kernel. For example, the operating system will not convert a top secret document to a lower classification without a formal, documented process of declassification. Contrast with discretionary access control and role-based access control.

Copyright © 1981-2025 by The Computer Language Company Inc. All Rights reserved. THIS DEFINITION IS FOR PERSONAL USE ONLY. All other reproduction is strictly prohibited without permission from the publisher.

Mentioned in

References in periodicals archive

-- Mandatory access control allows the system administrator to set up policies and accounts that will allow each user to have full access to the files and resources he or she needs, but not to other information and resources not immediately necessary to perform assigned tasks.

NIAP CCEVS VALIDATES SGI TRUSTED IRIX 6.5 OS

For enterprises distributing handheld devices running on the Pocket PC platform, PointsecO for Pocket PC provides enforceable mandatory access control along with data encryption, all of which can be centrally managed.

PDA security protection for pocket PC. (Security News)

The company says it is aimed at businesses and organisations deploying handheld devices operating on the Windows CE platform who require enforceable and centrally managed data security, including mandatory access control and data encryption.

e-business: Computer security on the move

All content on this website, including dictionary, thesaurus, literature, geography, and other reference data is for informational purposes only. This information should not be considered complete, up to date, and is not intended to be used in place of a visit, consultation, or advice of a legal, medical, or any other professional.