getlabel(1)

NAME | SYNOPSIS | DESCRIPTION | OPTIONS | RETURN VALUES | ATTRIBUTES | SEE ALSO | NOTES

NAME

getlabel- Get the CMW label for files

SYNOPSIS

/usr/bin/getlabel [-hiIlLsSx] filename...

DESCRIPTION

getlabel gets the CMW label associated with each filename. When options are not specified, the output format of the CMW label is displayed in default format. When the specified options conflict, getlabel terminates with an error. Conflicting options include -i and -I, -s and -S, and -l and -L.

OPTIONS

-h

Get the label of the symbolic link instead of the file it points to.

-i

Get the information label (IL) portion from the CMW label associated with the specified file, and display it. ILs display as ADMIN_LOW. See NOTES below.

-I

Get the information label portion from the CMW label associated with the specified file, and display it. ILs display as ADMIN_LOW. See NOTES below.

-l

Get the CMW label associated with the specified file, and display the CMW label in short form; equivalent to -i -s.

-L

Get the CMW label associated with the specified file, and display the CMW label in long form; equivalent to -I -S.

-s

Get the sensitivity label portion from the CMW label associated with the specified file, and display the sensitivity label in short form.

-S

Get the sensitivity label portion from the CMW label associated with the specified file, and display the sensitivity label in long form.

-x

Get the CMW label associated with the specified file, and display the label in hexadecimal form.

RETURN VALUES

getlabel exits with one of the following values:

0

Successful completion

1

Unsuccessful completion due to usage error

2

Unable to translate label

3

Unable to allocate memory

ATTRIBUTES

See attributes(5) for descriptions of the following attributes:

ATTRIBUTE TYPE	ATTRIBUTE VALUE
Availability	SUNWtsu

SEE ALSO

Trusted Solaris 8 Reference Manual

setlabel(1)

SunOS 5.8 Reference Manual

attributes(5)

NOTES

Information labels (ILs) are not supported in Trusted Solaris 7 and later releases. Trusted Solaris software interprets any ILs on communications and files from systems running earlier releases as ADMIN_LOW.

• Objects still have CMW labels, and CMW labels still include the IL component: IL[SL]; however, the IL component is fixed at ADMIN_LOW.

  As a result, Trusted Solaris 7 and later releases have the following characteristics:

  • ILs do not display in window labels; SLs (Sensitivity Labels) display alone within brackets.

  • ILs do not float.

  • Setting an IL on an object has no effect.

  • Getting an object's IL will always return ADMIN_LOW.

  • Although certain utilities, library functions, and system calls can manipulate IL strings, the resulting ILs cannot be set on any objects.

  • Sensitivity labels, not information labels, display on printer banners.

  • IL-related privileges are no longer used.

  • In auditing, the ilabel token is recorded as ADMIN_LOW, when it is recorded. The audit event numbers 519 (AUE_OFLOAT), 520 (AUE_SFLOAT), and 9036 (AUE_iil_change) continue to be reserved, but those events are no longer recorded.

Trusted Solaris 8  Last Revised 20 Aug 2000

NAME | SYNOPSIS | DESCRIPTION | OPTIONS | RETURN VALUES | ATTRIBUTES | SEE ALSO | NOTES