Label Encodings Files

All label components for a system, that is, classifications, compartments, and the associated rules are stored in a file called label_encodings(4) (located in /etc/security/tsol). The security administrator sets up the label_encodings file for the site. A label encodings file contains:

• component definitions--definitions of classifications, compartments, labels, and clearances, including rules for required combinations and constraints

• accreditation range definitions--specification of the clearances and minimum labels that define the sets of available labels for the entire system and for normal (non-administrative) users

• printing specifications--identification and handling information for print banners, trailers, headings, footers, and other security features for printouts

• customizations--local definitions including label color codes, alternative names for classifications, compartments, and markings in the graphical interface, and other items

For more information on the label_encodings file, see the man page for label_encodings(4) and the manuals, Trusted Solaris Label Administration and Compartmented Mode Workstation Labeling: Encodings Format.