Before a system can be configured for MCS, check the following:

• SELinux must be configured in enforcing mode.

• SELinux must be configured to use either the targeted or mls policies.

• The policycoreutils-python-utils package must be installed so you can use the chcat and semanage commands.

• The setools-console package can be installed to use the seinfo command for verification.

• SELinux confined user mappings are typical when using MCS. For example, nonprivileged users are assigned to user_u, while privileged users are assigned to staff_u. Define user mappings before configuring MCS to make the process easier. See Administering SELinux Users.