Login effective SL and TL

Users are assigned a default login SL and TL. The default login SL and TL are the effective SL and effective TL of the user's process after a successful login.

If a user does not want to log in at their default login SL, they can choose a different SL at login time by using the -e option of the login command. The SL supplied by the user must be dominated by the user's clearance and contained in the system accreditation range. The TL can be specified by the user at login time by using the -t option of the login command.

The default login SL and TL are defined in the /etc/security/user file, along with the username and clearance for each user. The effective SL of the user must be lie between the tty SL range as specified in the /etc/security/login.cfg file. The user's effective SL must be dominated by the tty's maximum SL and dominate the minimum SL. The effective TL of the user must be same as the tty's TL.