A system of access control that assigns security labels or classifications to system resources and allows access only to entities (people, processes, devices) with distinct levels of authorization ...

In general, such mandatory access control systems enforce the rule that no one reads information from a higher level of classification, and no one writes information to a lower level of ...