1Allows a process to override Manditory Access Control 2(MAC) access. Not all kernels are configured with a MAC 3mechanism, but this is the capability reserved for 4overriding them. 5