There are three utilities specified to support mandatory access control. The three utilities are getfmac (allows a user to view the label associated with a file), getpmac (allows a user to view the label associated with a process), and setfmac (allows a user to set the label associated with a file).
The getfmac utility displays the text form of a MAC label associated with a file. The user specifies the file. This utility requires read access for the file of the associated label. The getpmac utility displays the text form of a MAC label associated with the current process.
The setfmac utility changes the MAC label of each specified file to the specified label. The user specifies the file(s) that are to have associated labels changed.