ARRAY Components
A security label component of type ARRAY is an ordered set of no
more than 64 elements. Each element defines a value that is valid
for that component within a security policy. The order in which elements
are declared is significant, because it defines a descending order
of data sensitivity, with each successive element ranking lower in
data sensitivity than the preceding element. The set of label elements
of the array and their comma separators must be enclosed between a
pair of bracket ( [ ... ]
) symbols.
When an ARRAY component is specified in the definition of a security label, the label can specify no more than one element of that component as the value of the component.
CREATE SECURITY LABEL COMPONENT aquilae
ARRAY [ "imperator", "tribunus", "centurio", "miles", "asinus" ];
Here the component element with the highest data sensitivity
is imperator and asinus has the lowest data sensitivity,
with the data sensitivity of tribunus ranking above that of centurio but
below that of imperator.A component of type ARRAY can be appropriate in contexts where some dimension of a multidimensional security policy can be mapped onto a single scale that is monotonically descending.