This enforcement typically is provided via an implementation that meets the reference monitor concept (see AC-25). Otherwise, the access control policy can be circumvented. The policy is uniformly enforced over all subjects and objects to which the information system has control. This class of mandatory access control policies also constrains what actions subjects can take with respect to the propagation of access control privileges that is, a subject with a privilege cannot pass that privilege to other subjects.
The above class of mandatory access control policies constrains what actions subjects can take with information obtained from data objects for which they have already been granted access, thus preventing the subjects from passing the information to unauthorized subjects and objects.
Mandatory access control as defined in this control enhancement is synonymous with nondiscretionary access control, and is not constrained only to certain historical uses (e.g., implementations using the Bell-LaPadula Model).
