Processes can read the same or lower security levels, but can only write to their own or higher security levels.