Security model where access decisions are based on a security policy defined by a central authority, enforcing predefined security policy in Linux.