| Skip Navigation Links | |
| Exit Print View | |
|
Oracle Solaris Trusted Extensions Label Administration Oracle Solaris 11 Express 11/10 |
| Skip Navigation Links | |
| Exit Print View | |
|
|
Oracle Solaris Trusted Extensions Label Administration Oracle Solaris 11 Express 11/10 |
1. Labels in Trusted Extensions Software (Overview)
2. Planning Labels in Trusted Extensions(Tasks)
3. Creating a Label Encodings File (Tasks)
4. Labeling Printer Output (Tasks)
5. Customizing the LOCAL DEFINITIONS Section (Tasks)
6. Planning an Organization's Encodings File (Example)
A. Encodings File for SecCompany (Example)
Note - This file is similar to the label_encodings.example file that is delivered by Trusted Extensions.
At SecCompany, PUBLIC is the sensitivity label for communications across the Internet. INTERNAL_USE_ONLY is the sensitivity label for communications within the company.
The ALL_DEPARTMENTS compartment word gets turned on when all defined compartment bits are on. This compartment word works as a toggle in a label builder.
* ident "@(#)label_encodings.seccompany %I% %E%"
*
* Copyright 2010 SecCompany, Inc. All rights reserved.
* Use is subject to license terms.
*
*
* These confidential labels are required by SecCompany's
* legal and information protection departments.
* Department names can be used for controlling
* access to information across department boundaries.
* These labels are used for mandatory access control
* checks based on user clearance labels and labels and
* sensitivity labels on files and directories.
VERSION= SecCompany, Inc. Example Version - 2.2 10/10/20
CLASSIFICATIONS:
name= PUBLIC; sname= PUB; value= 1;
name= INTERNAL_USE_ONLY; sname= IUO; aname= IUO; value= 4;
name= NEED_TO_KNOW; sname= NTK; aname= NTK; value= 5;
name= REGISTERED; sname= REG; aname= REG; value= 6;
INFORMATION LABELS:
WORDS:
name= ALL_DEPARTMENTS; sname= ALL; compartments= 11-20; minclass= NEED_TO_KNOW;
name= EXECUTIVE_MANAGEMENT_GROUP; sname= EMGT; compartments= 11;minclass= NEED_TO_KNOW;
name= SALES; sname= SALES; compartments= 12; minclass= NEED_TO_KNOW;
name= FINANCE; sname= FIN; compartments= 13; minclass= NEED_TO_KNOW;
name= LEGAL; sname= LEGAL; compartments= 14; minclass= NEED_TO_KNOW;
name= MARKETING; sname= MKTG; compartments= 15 20; minclass= NEED_TO_KNOW;
name= HUMAN_RESOURCES; sname= HR; compartments= 16; minclass= NEED_TO_KNOW;
name= ENGINEERING; sname= ENG; compartments= 17 20; minclass= NEED_TO_KNOW;
name= MANUFACTURING; sname= MFG; compartments= 18; minclass= NEED_TO_KNOW;
name= SYSTEM_ADMINISTRATION; sname= SYSADM; compartments= 19; minclass= NEED_TO_KNOW;
name= PROJECT_TEAM; sname= P_TEAM; compartments= 20; minclass= NEED_TO_KNOW;
REQUIRED COMBINATIONS:
COMBINATION CONSTRAINTS:
SENSITIVITY LABELS:
WORDS:
name= ALL_DEPARTMENTS; sname= ALL; compartments= 11-20; minclass= NEED_TO_KNOW;
name= EXECUTIVE_MANAGEMENT_GROUP; sname= EMGT; compartments= 11;minclass= NEED_TO_KNOW;
name= SALES; sname= SALES; compartments= 12; minclass= NEED_TO_KNOW;
name= FINANCE; sname= FIN; compartments= 13; minclass= NEED_TO_KNOW;
name= LEGAL; sname= LEGAL; compartments= 14; minclass= NEED_TO_KNOW;
name= MARKETING; sname= MKTG; compartments= 15 20; minclass= NEED_TO_KNOW;
name= HUMAN_RESOURCES; sname= HR; compartments= 16; minclass= NEED_TO_KNOW;
name= ENGINEERING; sname= ENG; compartments= 17 20; minclass= NEED_TO_KNOW;
name= MANUFACTURING; sname= MFG; compartments= 18; minclass= NEED_TO_KNOW;
name= SYSTEM_ADMINISTRATION; sname= SYSADM; compartments= 19; minclass= NEED_TO_KNOW;
name= PROJECT_TEAM; sname= P_TEAM; compartments= 20; minclass= NEED_TO_KNOW;
REQUIRED COMBINATIONS:
COMBINATION CONSTRAINTS:
CLEARANCES:
WORDS:
name= ALL_DEPARTMENTS; sname= ALL; compartments= 11-20; minclass= NEED_TO_KNOW;
name= EXECUTIVE_MANAGEMENT_GROUP; sname= EMGT; compartments= 11;minclass= NEED_TO_KNOW;
name= SALES; sname= SALES; compartments= 12; minclass= NEED_TO_KNOW;
name= FINANCE; sname= FIN; compartments= 13; minclass= NEED_TO_KNOW;
name= LEGAL; sname= LEGAL; compartments= 14; minclass= NEED_TO_KNOW;
name= MARKETING; sname= MKTG; compartments= 15 20; minclass= NEED_TO_KNOW;
name= HUMAN_RESOURCES; sname= HR; compartments= 16; minclass= NEED_TO_KNOW;
name= ENGINEERING; sname= ENG; compartments= 17 20; minclass= NEED_TO_KNOW;
name= MANUFACTURING; sname= MFG; compartments= 18; minclass= NEED_TO_KNOW;
name= SYSTEM_ADMINISTRATION; sname= SYSADM; compartments= 19; minclass= NEED_TO_KNOW;
name= PROJECT_TEAM; sname= P_TEAM; compartments= 20; minclass= NEED_TO_KNOW;
REQUIRED COMBINATIONS:
COMBINATION CONSTRAINTS:
CHANNELS:
WORDS:
name= DISTRIBUTE_ONLY_TO; prefix;
name= EMPLOYEES (NON-DISCLOSURE AGREEMENT REQUIRED); suffix;
name= ALL_DEPARTMENTS; prefix= DISTRIBUTE_ONLY_TO; compartments= 11-20;
suffix= EMPLOYEES (NON-DISCLOSURE AGREEMENT REQUIRED);
name= EXECUTIVE_MANAGEMENT_GROUP; prefix= DISTRIBUTE_ONLY_TO; compartments= 11;
suffix= EMPLOYEES (NON-DISCLOSURE AGREEMENT REQUIRED);
name= SALES; prefix= DISTRIBUTE_ONLY_TO; compartments= 12;
suffix= EMPLOYEES (NON-DISCLOSURE AGREEMENT REQUIRED);
name= FINANCE; prefix= DISTRIBUTE_ONLY_TO; compartments= 13;
suffix= EMPLOYEES (NON-DISCLOSURE AGREEMENT REQUIRED);
name= LEGAL; prefix= DISTRIBUTE_ONLY_TO; compartments= 14;
suffix= EMPLOYEES (NON-DISCLOSURE AGREEMENT REQUIRED);
name= MARKETING; prefix= DISTRIBUTE_ONLY_TO; compartments= 15 20;
suffix= EMPLOYEES (NON-DISCLOSURE AGREEMENT REQUIRED);
name= HUMAN_RESOURCES; prefix= DISTRIBUTE_ONLY_TO; compartments= 16;
suffix= EMPLOYEES (NON-DISCLOSURE AGREEMENT REQUIRED);
name= ENGINEERING; prefix= DISTRIBUTE_ONLY_TO; compartments= 17 20;
suffix= EMPLOYEES (NON-DISCLOSURE AGREEMENT REQUIRED);
name= MANUFACTURING; prefix= DISTRIBUTE_ONLY_TO; compartments= 18;
suffix= EMPLOYEES (NON-DISCLOSURE AGREEMENT REQUIRED);
name= SYSTEM_ADMINISTRATION; prefix= DISTRIBUTE_ONLY_TO; compartments= 19;
suffix= EMPLOYEES (NON-DISCLOSURE AGREEMENT REQUIRED);
name= PROJECT_TEAM; prefix= DISTRIBUTE_ONLY_TO; compartments= 20;
suffix= EMPLOYEES (NON-DISCLOSURE AGREEMENT REQUIRED);
PRINTER BANNERS:
WORDS:
name= SECCOMPANY CONFIDENTIAL:; prefix;
name= (NON-DISCLOSURE AGREEMENT REQUIRED); suffix;
name= ALL_DEPARTMENTS; prefix= SECCOMPANY CONFIDENTIAL:;
compartments= 11-20; suffix=(NON-DISCLOSURE AGREEMENT REQUIRED);
name= EXECUTIVE_MANAGEMENT_GROUP; prefix= SECCOMPANY CONFIDENTIAL:;
compartments= 11; suffix=(NON-DISCLOSURE AGREEMENT REQUIRED);
name= SALES; prefix= SECCOMPANY CONFIDENTIAL:;
compartments= 12; suffix=(NON-DISCLOSURE AGREEMENT REQUIRED);
name= FINANCE; prefix= SECCOMPANY CONFIDENTIAL:;
compartments= 13; suffix=(NON-DISCLOSURE AGREEMENT REQUIRED);
name= LEGAL; prefix= SECCOMPANY CONFIDENTIAL:;
compartments= 14 20; suffix=(NON-DISCLOSURE AGREEMENT REQUIRED);
name= MARKETING; prefix= SECCOMPANY CONFIDENTIAL:;
compartments= 15; suffix=(NON-DISCLOSURE AGREEMENT REQUIRED);
name= HUMAN_RESOURCES; prefix= SECCOMPANY CONFIDENTIAL:;
compartments= 16; suffix=(NON-DISCLOSURE AGREEMENT REQUIRED);
name= ENGINEERING; prefix= SECCOMPANY CONFIDENTIAL:;
compartments= 17 20; suffix=(NON-DISCLOSURE AGREEMENT REQUIRED);
name= MANUFACTURING; prefix= SECCOMPANY CONFIDENTIAL:;
compartments= 18; suffix=(NON-DISCLOSURE AGREEMENT REQUIRED);
name= SYSTEM_ADMINISTRATION; prefix= SECCOMPANY CONFIDENTIAL:;
compartments= 19; suffix=(NON-DISCLOSURE AGREEMENT REQUIRED);
name= PROJECT_TEAM; prefix= SECCOMPANY CONFIDENTIAL:;
compartments= 20; suffix=(NON-DISCLOSURE AGREEMENT REQUIRED);
ACCREDITATION RANGE:
classification= PUBLIC; only valid compartment combinations:
PUB
classification= INTERNAL_USE_ONLY; only valid compartment combinations:
IUO
classification= NEED_TO_KNOW; all compartment combinations valid;
classification= REGISTERED; only valid compartment combinations:
REG
minimum clearance= PUB;
minimum sensitivity label= PUB;
minimum protect as classification= PUB;
*
* Local site definitions and locally configurable options.
*
LOCAL DEFINITIONS:
*
Classification Name= Classification;
Compartments Name= Departments;
Default User Sensitivity Label= PUB;
Default User Clearance= PUB;
COLOR NAMES:
label= Admin_Low; color= #bdbdbd;
label= PUBLIC; color= green;
label= INTERNAL_USE_ONLY; color= yellow;
label= NEED_TO_KNOW; color= blue;
label= NEED_TO_KNOW EMGT; color= #7FA9EB;
label= NEED_TO_KNOW SALES; color= #87CEFF;
label= NEED_TO_KNOW FIN; color= #00BFFF;
label= NEED_TO_KNOW LEGAL; color= #7885D0;
label= NEED_TO_KNOW MKTG; color= #7A67CD;
label= NEED_TO_KNOW HR; color= #7F7FFF;
label= NEED_TO_KNOW ENG; color= #007FFF;
label= NEED_TO_KNOW MFG; color= #0000BF;
label= NEED_TO_KNOW P_TEAM; color= #9E7FFF;
label= NEED_TO_KNOW SYSADM; color= #5B85D0;
label= NEED_TO_KNOW ALL; color= #4D658D;
label= REGISTERED; color= red;
label= Admin_High; color= #636363;
*
* End of local site definitions
*
|