Enable Solaris Trusted Extensions (Solaris Trusted Extensions Administrator's Procedures)

Solaris Trusted Extensions Administrator's Procedures

Enable Solaris Trusted Extensions

The labeld service attaches labels to communications endpoints. For example, the following are labeled:

All zones and the directories and files within each zone
All processes including window processes
All network communications

Before You Begin

You have completed the tasks in Installing or Upgrading the Solaris OS for Trusted Extensions and Collecting Information and Making Decisions Before Enabling Trusted Extensions.

Open a terminal window and enable the labeld service.
# svcadm enable -s labeld
The labeld service adds labels to the system and starts the Solaris auditing service and device allocation. Do not perform other tasks until the cursor returns to the prompt.

Verify that the service is enabled.

# svcs -x labeld
svc:/system/labeld:default (Trusted Extensions)
 State: online since weekday month date hour:minute:second year
   See: labeld(1M)
Impact: None.

If you plan to perform any of the following tasks, do not reboot:
- Protect the hardware.
- Install your own label_encodings file.
- Run on an IPv6 network.
- Modify the CIPSO DOI.
  
  To perform any of these tasks, see Setting Up the Global Zone in Trusted Extensions. You will reboot after these tasks are accomplished.

Otherwise, reboot.