Configuring a Multilevel Secure System › Using Security Labels › Requiring Security Labels for Files and Directories

Requiring Security Labels for Files and Directories

The MLFSOBJ(YES) option specifies that security labels are required for UNIX directories and files in an MLS system. This option should be set if you want to use MAC protection and security labels for UNIX files and directories.

Important! Before activating this option, make sure you have properly set up HFS and zFS file systems with MLS active, including migrating HFS files systems to zFS file systems, as necessary; otherwise, users may be erroneously prevented from accessing files that they need to do their work.