Subjects and objects each have a set of security rules .
Subjects and objects each have a set of security attributes .