Bell & Lapadula Model

James Morris jmorris at
Thu Feb 17 20:24:27 UTC 2005

On Thu, 17 Feb 2005, Juan Espino wrote:

> Hello all,
> SELinux enforces a Mandatory Access Control (MAC) Policy based on Bell and 
> Lapadula Model.  I understand the read control property (no read up) and the 
> write control (no write down), but in this model there are another property 
> called tranquility property, I don't know very well how SELinux enforces 
> this property,

SELinux includes an experimental MLS implementation based on BLP.  This
feature is not currently enabled in Fedora.

Thus, it may be better to discuss the MLS component on the NSA list:

- James
James Morris
<jmorris at>

More information about the fedora-selinux-list mailing list