Solaris Trusted Extensions Administrator's Procedures

ProcedureHow to Modify Default User Label Attributes

You can modify the default user label attributes during the configuration of the first system. The changes must be copied to every Trusted Extensions host.

Before You Begin

You must be in the Security Administrator role in the global zone. For details, see How to Enter the Global Zone in Trusted Extensions.

  1. Review the default user attribute settings in the /etc/security/tsol/label_encodings file.

    For the defaults, see label_encodings File Defaults.

  2. Modify the user attribute settings in the label_encodings file.

    Use the trusted editor. For details, see How to Edit Administrative Files in Trusted Extensions.

    The label_encodings file should be the same on all hosts.

  3. Distribute a copy of the file to every Trusted Extensions host.