Perform an MLS-MAC check Permit if MAC check passes; Not Applicable otherwise