Only if the correct dominance relationship exists between the subject and the object is the access allowed. Both types of labels include a hierarchical classification, non-hierarchical categories as well as other information. The purpose of an SL is to control access between subjects and objects. The purpose of an IL is to provide a close approximation of the actual sensitivity of the information contained in a subject or object, and to encode any dissemination and control markings or handling caveats associated with that information. An object's IL is automatically adjusted by the system whenever the contents of that object change.
ILs appear on windows and printed output and are meant to provide advisory labels to the user.
The Trusted Path Handler, which controls the Trusted Path region of the screen and provides a direct communication path between users and the Trusted Computing Base. Audit collection and analysis. Protection mechanisms are supported by hierarchical hardware modes. Memory access and protection and process isolation are based on those modes. In addition, privileged instructions provide hardware protection.