thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Security Fundamentals & Crypto · Foundational

Mandatory Access Control (MAC)

Access control model where a central authority enforces access based on security labels and clearances.

Definition

In MAC, objects carry classification labels and subjects carry clearances, and the system enforces policy that users cannot override. It is used in military and government systems and in hardened operating systems through SELinux and AppArmor. Formal models such as Bell-LaPadula define MAC rules.

Example

SELinux prevents a web server process from reading user home directories even if file permissions would allow it.

Exam tip

MAC = labels and clearances, system-enforced, most restrictive. Don't confuse with MAC address or message authentication code.

Don't confuse it with

Related terms