If individuals or processes exist that may be denied access to any of the data in the system environment, then the system must be trusted to enforce MAC.
如果个人或进程可能被拒绝访问系统环境中的任何数据，则系统必须可信以强制执行MAC。