Future Trusted Solaris Releases

Information in this section is provided to help assist customers and vendors with early planning for migration to future releases. This information is based on information that is presently available.

In the future, Sun might no longer supply Trusted Solaris software as a product that is based on modifying the Solaris kernel. Instead, Sun might produce the functionality as software that is designed to meet or exceed the requirements of the Common Criteria's Labeled Security Protection Profile. Sun might also include features such as the multilevel secure desktop and trusted networking. This functionality might be installed with a future release of the Solaris operating system.

Some features that might change are:

• The information labels (ILs) feature was removed in the Trusted Solaris 7 release, but programmatic storage for ILs was maintained in order to preserve compatibility. That storage might be removed in a future release.

• Support for the TSIX protocol might be dropped.

• The NIS+ naming service might be replaced by another naming service in future releases.

• The formats of configuration files might change. The file formats are described in section 4 of the Reference Manual of earlier releases. For example, the entries and the fields in the audit_user file and the tsolinfo file might change.

• The names of privileges might change. Therefore, interfaces that check for specific privileges might change correspondingly. For example, the privilege macros that are described on the priv_macros(5) man page might change.

Your experience when using future releases of Trusted Solaris software will generally be the same as your current experience. However, the underlying implementation for features such as privileges, file system attributes, and networking might change. For example, the interfaces that are documented in the Trusted Solaris Reference Manual might change.

Sun might produce a transition guide that maps the current interfaces to their new counterparts. Alternatively, Sun might recommend a way to handle removed interfaces.

The following interfaces might be removed in a future Trusted Solaris release:

• User commands

  • adornfc(1)
  • getfattrflag(1)
  • getfattrflag(1)
  • getmldadorn(1)
  • getsldname(1)
  • setfattrflag(1)
  • setfpriv(1)
  • setlabel(1)
  • tfind(1)

• System administration commands

  • getfsattr(1M)
  • getfsattr_ufs(1M)
  • newsecfs(1M)
  • runpd(1M)
  • setfsattr(1M)
  • sysh(1M)

• System calls

  • fgetcmwfsrange(2)
  • fgetcmwlabel(2)
  • fgetfattrflag(2)
  • fgetfpriv(2)
  • fgetfsattr(2)
  • fgetmldadorn(2)
  • fgetsldname(2)
  • fsetcmwlabel(2)
  • fsetfattrflag(2)
  • fsetfpriv(2)
  • getcmwfsrange(2)
  • getcmwlabel(2)
  • getcmwplabel(2)
  • getfattrflag(2)
  • getfpriv(2)
  • getfsattr(2)
  • getmldadorn(2)
  • getmsgqcmwlabel(2)
  • getsemcmwlabel(2)
  • getshmcmwlabel(2)
  • getsldname(2)
  • lgetcmwlabel(2)
  • lsetcmwlabel(2)
  • mldgetattrflag(2)
  • mldsetfattrflag(2)
  • setclearance(2)
  • setcmwlabel(2)
  • setcmwplabel(2)
  • setfattrflag(2)
  • setfpriv(2)
  • setfsattr(2)
  • tokmapper(2)
  • writel(2)
  • writevl(2)

The following interfaces might be removed or be substituted for by other interfaces:

• Trusted Solaris library routines

  • adornfc(3TSOL)
  • auditwrite(3TSOL)
  • b*(3TSOL)
  • getcsl(3TSOL)
  • getpeerinfo(3TSOL)
  • getvfsaent(3TSOL)
  • getvfsafile(3TSOL)
  • hextob(3TSOL)
  • h_free(3TSOL)
  • htobcl(3TSOL)
  • htobclear(3TSOL)
  • htobsl(3TSOL)
  • labelbuilder(3TSOL)
  • labelclipping(3TSOL)
  • libt6(3NSL)
  • mldgetcwd(3TSOL)
  • mldlstat(3TSOL)
  • mldrealpath(3TSOL)
  • mldrealpathl(3TSOL)
  • mldstat(3TSOL)
  • randomword(3TSOL)
  • sb*(3TSOL)
  • setbltype(3TSOL)
  • setcsl(3TSOL)
  • set_inheritable_priv(3TSOL)
  • str_to_priv*(3TSOL)
  • tsol_lbuild_*(3TSOL)
  • t6*(3NSL)
  • Xb*(3TSOL)
  • tsol*strattr(9F)

The following interfaces might change in name or behavior or both:

• User commands

  • pattr(1)
  • ppriv(1)
  • pprivtest(1)
  • tar(1)

• System administration commands

  • smnetidb(1M)
  • smnettmpl(1M)
  • smprofile(1M)
  • tbootparam(1M)
  • tnchkdb(1M)
  • tnctl(1M)
  • tnd(1M)
  • tninfo(1M)

• System calls

  • getclearance(2)
  • getpattr(2)
  • setpattr(2)
  • getppriv(2)

• PAM interfaces

  • pam_tp_auth(5)
  • pam_tsol(5)