7.3. Defining category labels in MCS

Procedure

1. Modify existing categories or create new categories by editing the /etc/selinux/<selinux_policy>/setrans.conf file in a text editor. Replace <selinux_policy> with targeted or mls depending on the SELinux policy you use. For example:

   # vi /etc/selinux/targeted/setrans.conf

2. In the setrans.conf file for your policy, define the combinations of categories required by your scenario using the syntax s_<security_level>_:c_<category_number>_=<category_name>, for example:

   s0:c0=Marketing
   s0:c1=Finance
   s0:c2=Payroll
   s0:c3=Personnel

   • You can use category numbers from c0 to c1023.
   • In the targeted policy, use the s0 security level.
   • In the mls policy, you can label each combination of sensitivity levels and categories.
3. Optional: In the setrans.conf file, you can also label the MLS sensitivity levels.
4. Save and exit the file.

5. To make the changes effective, restart the MCS translation service:

   # systemctl restart mcstrans