Mandatory access control (mac) method and related device

An apparatus, comprising:

• at least one processor and a memory coupled with the at least one processor, wherein the memory comprising instructions, when executed by the at least one processor, cause the apparatus to perform operations of an operating system of the apparatus, the operations including:
• based on that a first subject accesses a first object to perform a first operation, determining, based on a security policy, that the first subject has no permission to access the first object to perform the first operation, wherein the first object is configured to be in a permissive mode, and wherein a security status in the operating system is an enforcing mode;
• and
• allowing the first subject to access the first object and perform the first operation.

An apparatus, comprising:

• at least one processor and a memory coupled with the at least one processor, wherein the memory comprising instructions, when executed by the at least one processor, cause the apparatus to perform operations of an operating system of the apparatus, the operations including:
• based on that a first subject accesses a first object to perform a first operation, determine, based on a security policy, that the first subject has no permission to access the first object to perform the first operation, wherein the first subject or the first object is configured to be in an enforcing mode, and wherein a security status in the operating system is a permissive mode;
• and
• forbid the first subject to access the first object to perform the first operation.