Under MAC (and unlike DAC), users cannot override or modify this policy, either accidentally or intentionally.
在MAC（不同于DAC）下，用户不能覆盖或修改策略，无论为意外或故意。