Assertion: observation's application | /r/CapableOf | modify whitelisted files
Facets:
Source sentences:
text: If these applications create and execute new files or modify the whitelisted files, MAC blocks the action.