NAME | SYNOPSIS | DESCRIPTION | OPTIONS | RETURN VALUES | ATTRIBUTES | SEE ALSO | NOTES
plabel, a proc tools command, gets the label of a process. If the pid is not specified, the label displayed is that of the plabel command. When output options are not specified, the format of the label display reflects the label display options set by the administrator. If the command specifies conflicting options, plabel command usage is displayed. Conflicting options include -i and -I, -s and -S, and -l and -L.
Get the information label associated with the process, ADMIN_LOW
, and display it. Information Labels (ILs) are obsolete. See NOTES.
Get the information label associated with the process, ADMIN_LOW
, and display it. Information Labels (ILs) are obsolete. See NOTES.
Get the CMW label associated with the process, and display that label in short form. The IL portion of the label displays as ADMIN_LOW
.
Get the CMW label associated with the process, and display that label in long form. The IL portion of the label displays as ADMIN_LOW
.
Get the sensitivity label associated with the process, and display that label in short form.
Get the sensitivity label associated with the process, and display that label in long form.
plabel exits with one of these values:
Successful completion.
Unsuccessful completion because of a usage error.
Inability to translate label.
Inability to allocate memory.
See attributes(5) for descriptions of the following attributes:
ATTRIBUTE TYPE | ATTRIBUTE VALUE |
---|---|
Availability | SUNWtsu |
Information labels (ILs) are not supported in Trusted Solaris 7 and later releases. Trusted Solaris software interprets any ILs on communications and files from systems running earlier releases as ADMIN_LOW
.
Objects still have CMW labels, and CMW labels still include the IL component: IL[SL]; however, the IL component is fixed at ADMIN_LOW
.
As a result, Trusted Solaris 7 and later releases have the following characteristics:
ILs do not display in window labels; SLs (Sensitivity Labels) display alone within brackets.
ILs do not float.
Setting an IL on an object has no effect.
Getting an object's IL will always return ADMIN_LOW
.
Although certain utilities, library functions, and system calls can manipulate IL strings, the resulting ILs cannot be set on any objects.
Sensitivity labels, not information labels, display on printer banners.
IL-related privileges are no longer used.
In auditing, the ilabel token is recorded as ADMIN_LOW
, when it is recorded. The audit event numbers 519 (AUE_OFLOAT), 520 (AUE_SFLOAT), and 9036 (AUE_iil_change) continue to be reserved, but those events are no longer recorded.
NAME | SYNOPSIS | DESCRIPTION | OPTIONS | RETURN VALUES | ATTRIBUTES | SEE ALSO | NOTES