ifdef(`enable_mls',`
#
# Define sensitivities
#
# Domination of sensitivities is in increasin
# numerical order, with s0 being the lowest

gen_sens(mls_num_sens)

#
# Define the categories
#
# Generate declarations

gen_cats(mls_num_cats)

#
# Each MLS level specifies a sensitivity and zero or more categories which may
# be associated with that sensitivity.
#
# Generate levels from all sensitivities
# with all categories

gen_levels(mls_num_sens,mls_num_cats)



# MLS policy for the security class
#


mlsvalidatetrans { db_tuple }
	((( l1 eq l2 ) or
	  (( t3 == mlsdbupgrade ) and ( l1 domby l2 )) or
	  (( t3 == mlsdbdowngrade ) and ( l1 dom l2 )) or
	  (( t3 == mlsdbdowngrade ) and ( l1 incomp l2 ))) and
	 (( l1 eq h2 ) or
	  (( t3 == mlsdbupgrade ) and ( h1 domby h2 )) or
	  (( t3 == mlsdbdowngrade ) and ( h1 dom h2 )) or
	  (( t3 == mlsdbdowngrade ) and ( h1 incomp h2 ))));

') dnl end enable_mls
