Oracle Solaris Trusted Extensions Administrator's Procedures

September 2010

This book provides procedures for administering labels and programs that are unique to a Solaris system that is configured with Solaris Trusted Extensions software.

Document Information
Preface
1. Trusted Extensions Administration Concepts
- Trusted Extensions Software and the Oracle Solaris OS
- Basic Concepts of Trusted Extensions
2. Trusted Extensions Administration Tools
- Administration Tools for Trusted Extensions
- txzonemgr Script
- Trusted CDE Actions
- Device Allocation Manager
- Solaris Management Console Tools
- Label Builder in Trusted Extensions
- Command Line Tools in Trusted Extensions
- Remote Administration in Trusted Extensions
3. Getting Started as a Trusted Extensions Administrator (Tasks)
- What's New in Trusted Extensions
- Security Requirements When Administering Trusted Extensions
  - Role Creation in Trusted Extensions
  - Role Assumption in Trusted Extensions
- Getting Started as a Trusted Extensions Administrator (Task Map)
4. Security Requirements on a Trusted Extensions System (Overview)
- Configurable Oracle Solaris Security Features
- Security Requirements Enforcement
- Rules When Changing the Level of Security for Data
  - sel_config File
- Customization of Solaris Trusted Extensions (CDE)
  - Front Panel Customization
  - Workspace Menu Customization
5. Administering Security Requirements in Trusted Extensions (Tasks)
- Common Tasks in Trusted Extensions (Task Map)
6. Users, Rights, and Roles in Trusted Extensions (Overview)
- User Security Features in Trusted Extensions
- Administrator Responsibilities for Users
  - System Administrator Responsibilities for Users
  - Security Administrator Responsibilities for Users
- Decisions to Make Before Creating Users in Trusted Extensions
- Default User Security Attributes in Trusted Extensions
  - label_encodings File Defaults
  - policy.conf File Defaults in Trusted Extensions
- Configurable User Attributes in Trusted Extensions
- Security Attributes That Must Be Assigned to Users
  - Security Attribute Assignment to Users in Trusted Extensions
  - .copy_files and .link_files Files
7. Managing Users, Rights, and Roles in Trusted Extensions (Tasks)
- Customizing the User Environment for Security (Task Map)
- Managing Users and Rights With the Solaris Management Console (Task Map)
- Handling Other Tasks in the Solaris Management Console (Task Map)
8. Remote Administration in Trusted Extensions (Tasks)
- Secure Remote Administration in Trusted Extensions
- Methods for Administering Remote Systems in Trusted Extensions
- Remote Login by a Role in Trusted Extensions
  - Remote Role-Based Administration From Unlabeled Hosts
  - Remote Login Management in Trusted Extensions
- Administering Trusted Extensions Remotely (Task Map)
9. Trusted Extensions and LDAP (Overview)
- Using a Naming Service in Trusted Extensions
  - Non-Networked Trusted Extensions Systems
  - Trusted Extensions LDAP Databases
- Using the LDAP Naming Service in Trusted Extensions
10. Managing Zones in Trusted Extensions (Tasks)
- Zones in Trusted Extensions
- Global Zone Processes and Labeled Zones
- Zone Administration Utilities in Trusted Extensions
- Managing Zones (Task Map)
11. Managing and Mounting Files in Trusted Extensions (Tasks)
- Sharing and Mounting Files in Trusted Extensions
- NFS Mounts in Trusted Extensions
- Sharing Files From a Labeled Zone
- Access to NFS Mounted Directories in Trusted Extensions
  - Home Directory Creation in Trusted Extensions
  - Changes to the Automounter in Trusted Extensions
- Trusted Extensions Software and NFS Protocol Versions
- Backing Up, Sharing, and Mounting Labeled Files (Task Map)
12. Trusted Networking (Overview)
- The Trusted Network
- Network Security Attributes in Trusted Extensions
- Trusted Network Fallback Mechanism
- Overview of Routing in Trusted Extensions
- Administration of Routing in Trusted Extensions
13. Managing Networks in Trusted Extensions (Tasks)
- Managing the Trusted Network (Task Map)
- Configuring Trusted Network Databases (Task Map)
- Configuring Routes and Checking Network Information in Trusted Extensions (Task Map)
- Troubleshooting the Trusted Network (Task Map)
14. Multilevel Mail in Trusted Extensions (Overview)
- Multilevel Mail Service
- Trusted Extensions Mail Features
15. Managing Labeled Printing (Tasks)
- Labels, Printers, and Printing
- Managing Printing in Trusted Extensions (Task Map)
- Configuring Labeled Printing (Task Map)
- Reducing Printing Restrictions in Trusted Extensions (Task Map)
16. Devices in Trusted Extensions (Overview)
- Device Protection With Trusted Extensions Software
- Device Allocation Manager GUI
- Enforcement of Device Security in Trusted Extensions
- Devices in Trusted Extensions (Reference)
17. Managing Devices for Trusted Extensions (Tasks)
- Handling Devices in Trusted Extensions (Task Map)
- Using Devices in Trusted Extensions (Task Map)
- Managing Devices in Trusted Extensions (Task Map)
- Customizing Device Authorizations in Trusted Extensions (Task Map)
18. Trusted Extensions Auditing (Overview)
- Trusted Extensions and Auditing
- Audit Management by Role in Trusted Extensions
- Trusted Extensions Audit Reference
19. Software Management in Trusted Extensions (Tasks)
- Adding Software to Trusted Extensions
  - Oracle Solaris Security Mechanisms for Software
  - Evaluating Software for Security
    - Developer Responsibilities When Creating Trusted Programs
    - Security Administrator Responsibilities for Trusted Programs
- Trusted Processes in the Window System
  - Adding Trusted CDE Actions
- Managing Software in Trusted Extensions (Tasks)
  - How to Add a Software Package in Trusted Extensions
  - How to Install a Java Archive File in Trusted Extensions
A. Quick Reference to Trusted Extensions Administration
- Administrative Interfaces in Trusted Extensions
- Oracle Solaris Interfaces Extended by Trusted Extensions
- Tighter Security Defaults in Trusted Extensions
- Limited Options in Trusted Extensions
B. List of Trusted Extensions Man Pages
- Trusted Extensions Man Pages in Alphabetical Order
- Oracle Solaris Man Pages That Are Modified by Trusted Extensions
Index
- A
- B
- C
- D
- E
- F
- G
- H
- I
- J
- K
- L
- M
- N
- O
- P
- R
- S
- T
- U
- V
- W
- X
- Z

Skip Navigation Links
	Oracle Solaris Trusted Extensions Administrator's Procedures