mls: support templates

Signed-off-by: Dominick Grift <dominick.grift@defensec.nl>

1 files changed, 9 insertions, 3 deletions

diff --git a/src/sys.cil b/src/sys.cil
index fed73dc..9738789 100644
--- a/src/sys.cil
+++ b/src/sys.cil
@@ -1,18 +1,24 @@
 ;; SPDX-FileCopyrightText: © 2024 Dominick Grift <dominick.grift@defensec.nl>
 ;; SPDX-License-Identifier: Unlicense
 
-(sidcontext kernel (sys.id sys.role sys.subj lowlevelrange))
+(sidcontext kernel (sys.id sys.role sys.subj sys.lowlow))
 
 (block sys
 
+  (level low (s0))
+  (level high (s0 .catset))
+
+  (levelrange lowlow (low low))
+  (levelrange lowhigh (low high))
+
   (role role)
   (roletype role subj)
 
   (user id)
   (userrole id role)
 
-  (userlevel id systemlow)
-  (userrange id lowhighlevelrange)
+  (userlevel id low)
+  (userrange id lowhigh)
 
   (blockinherit .subj.template)