The Security Administrator role can do the following using keywords in the LOCAL DEFINITIONS section (shown in :
Replace names for administrative labels with administrator-defined alternates.
The renaming of administrative label names can cause interoperability options and is highly discouraged.
Substitute other valid low and high label names in the user accreditation range for the ADMIN_HIGH and ADMIN_LOW administrative labels.
See "Specifying Whether Other Labels are Substituted for Administrative Labels".
Specify a user clearance and user minimum label.
You only need to specify a user clearance or minimum label here if they should be different from the mandatory minimum clearance= and minimum sensitivity label= definitions in the ACCREDITATION RANGE: section.
See "To Specify a Default User Clearance and Minimum Label".
Specify alternate names for classifications and compartments to be used on label builder dialog boxes.
See "To Change Label Component Names Used in Label Builders".
Specify which colors are assigned to labels.
Even though the color definitions are optional, assigning colors to labels is highly recommended.
The Trusted Solaris 7 operating environment and later releases do not support flags. Leave the default flags values as they are shown in Example 4-1.
For more details on Trusted Solaris extensions to the label encodings keywords, see label_encodings(4).