If the trusted stripe is missing from your workspace, contact the security administrator. The problem with your system could be serious.
The trusted stripe should not appear during login, or when you lock your screen. If the trusted stripe shows, contact the administrator immediately.
If you leave your workstation briefly, lock the screen.
To lock your screen, do one of the following:
In Trusted CDE, click the screen lock icon in the workspace switch area of the Front Panel.
In Trusted GNOME, choose Lock Screen from the Main menu.
The screen turns black. At this point, only you can log in again.
The trusted stripe should not appear when the screen is locked. If the stripe does appear, notify the security administrator immediately.
At most sites, the screen automatically locks after a specified period of idleness. If you expect to leave the workstation for awhile, or if you expect someone else to use your workstation, log out.
To log out, do one of the following:
In Trusted CDE, click the EXIT icon in the workspace switch area of the Front Panel.
For a picture of the Front Panel, see Figure 3–1.
The Logout Confirmation dialog box is displayed.
In Trusted GNOME, choose Log Out your-name from the Main menu.
Confirm that you want to continue to log out.
Logging out is the normal way to end a Trusted Extensions session. Use the following procedure if you need to turn off your workstation.
If you are not on the console, you cannot shut down the system. For example, Sun RayTM clients cannot shut down the system.
To shut down the system, do one of the following:
To view your files, you use the same applications that you would use in Trusted CDE or Trusted GNOME on a Solaris system. If you are working at multiple labels, only the files that are at the label of the workspace are visible.
In a Trusted CDE workspace, open a terminal window or the File Manager.
Open a terminal window and list the contents of your home directory.
Click mouse button 3 over the background. From the Workspace menu, choose Programs –> Terminal.
On the Front Panel, click the File Manager.
The File Manager appears with the contents of your home directory at that label.
The File Manager opens at the same label as the current workspace. The application provides access to only those files that are at its label. For details about viewing files at different labels, see Containers and Labels.
In a Trusted GNOME workspace, open a terminal window or the File Browser.
Open a terminal window and list the contents of your home directory.
Click mouse button 3 over the background. From the menu, choose Open Terminal.
Double-click the Documents folder or the This Computer folder on your desktop.
These folders open in a File Browser. The File Browser application opens at the same label as the current workspace. The application provides access to only those files that are at its label. For details about viewing files at different labels, see Containers and Labels.
In the Solaris Express Community Edition release, review the trusted_extensions(5) man page in a terminal window.
% man trusted_extensions |
For a list of user commands that are specific to Trusted Extensions, see Appendix E, List of Trusted Extensions Man Pages, in Solaris Trusted Extensions Administrator’s Procedures. The man pages are also available from Sun's documentation web site.
In Trusted CDE, click the Help icon on the Front Panel.
In Trusted GNOME, click Help from the Trusted Path menu.
In Trusted CDE, users and roles can customize the Workspace menu for each distinct label.
In your current workspace, start to customize the Workspace menu.
If you are adding items to the Workspace menu, do the following:
If you are modifying the Workspace menu, do the following:
Confirm the menu changes, or cancel.
Linking a file or copying a file to another label is useful when you want to make a file with a lower label visible at higher labels. The linked file is only writable at the lower label. The copied file is unique at each label and can be modified at each label. For more information, see .copy_files and .link_files Files in Solaris Trusted Extensions Administrator’s Procedures.
You must be logged in to a multilevel session. Your site's security policy must permit linking.
Work with your administrator when modifying these files.
Decide which initialization files you want to link to other labels.
Create or modify the ~/.link_files file.
Type your entries one file per line. You can specify paths to subdirectories in your home directory, but you cannot use a leading slash. All paths must be within your home directory.
Decide which initialization files you want to copy to other labels.
Copying an initialization file is useful when you have an application that always writes to a file with a specific name, and you need to separate the data at different labels.
Create or modify the ~/.copy_files file.
Type your entries one file per line. You can specify paths to subdirectories in your home directory, but you cannot use a leading slash. All paths must be within your home directory.
In this example, the user wants to customize several initialization files per label. In her organization, a company web server is available at the Restricted level. So, she sets different initial settings in the .mozilla file at the Restricted level. Similarly, she has special templates and aliases at the Restricted level. So, she modifies the .aliases and .soffice initialization files at the Restricted level. She can easily modify these files after creating the .copy_files file at her lowest label.
% vi .copy_files # Copy these files to my home directory in every zone .aliases .mozilla .soffice |
In this example, the user wants her mail defaults and shell defaults to be identical at all labels.
% vi .link_files # Link these files to my home directory in every zone .cshrc .mailrc |
These files do not have safeguards for dealing with anomalies. Duplicate entries in both files or file entries that already exist at other labels can cause errors.
This operation can be useful when your system is not configured to display labels in the window frames.
Choose Query Window Label from the Trusted Path menu.
The pointer changes to a question mark.
Move the pointer around the screen.
The label for the region under the pointer is displayed in a small rectangular box at the center of the screen.
Click the mouse button to end the operation.
Some common tasks are affected by labels and security. In particular, the following tasks are affected by Trusted Extensions:
Emptying the trash
Finding calendar events
In Trusted CDE, restoring the Front Panel and using the Style Manager
Empty the trash.
The trash can contains files only at the label of the workspace. Delete sensitive information as soon as the information is in the trash can.
Find calendar events at every label.
Calendars show only the events at the label of the workspace that opened the calendar.
In Trusted CDE, restore the Front Panel by clicking the trusted stripe.
A minimized Front Panel is restored.
On both desktops, save a customized desktop at every label.
You can customize the workspace configuration for every label at which you log in.
Configure the desktop.
Arrange windows, establish the font size, and perform other customizations.
Users can save desktop configurations. Roles cannot save desktop configurations.
Save the current workspace.
In Trusted CDE, open the Style Manager. Choose your settings in the Startup icon.
The Style Manager requires the trusted path. Run the Style Manager from the Front Panel or from the Workspace menu, where the Style Manager has the trusted path.
Your desktop is restored in this configuration when you next log in at this label.
In Trusted GNOME, click the Main menu.
Click Preferences > Sessions.
Click the Session Options button.
Click Remember currently running applications, then close the dialog box.
Your desktop is restored in this configuration when you next log in at this label.