Trusted Extensions Configuration and Administration

Exit Print View

Updated: July 2014
 
 

How to Copy Files to Portable Media in Trusted Extensions

When copying to portable media, label the media with the sensitivity label of the information.


Note - During Trusted Extensions configuration, the root role might use portable media to transfer the label_encodings files to all systems. Label the media with Trusted Path.

Before You Begin

To copy administrative files, you must be in the root role in the global zone.

  1. Allocate the appropriate device.

    For example, the following command allocates a removable disk, such as a a JAZ or ZIP drive, or USB hot-pluggable media.

    # allocate rmdisk0

    On a windowed system, you can use the Device Manager. Open two File Browsers and drag the file from the device to the disk. For details, see How to Allocate a Device in Trusted Extensions in Trusted Extensions User’s Guide .

  2. Deallocate the device.
    # deallocate rmdisk0

    To deallocate the device by using the Device Manager, see How to Deallocate a Device in Trusted Extensions in Trusted Extensions User’s Guide .


    Note -  Remember to physically affix a label to the media with the sensitivity label of the copied files.
Example 4-8  Keeping Configuration Files Identical on All Systems

The system administrator wants to ensure that every system is configured with the same settings. So, on the first system that is configured, the administrator creates a directory that cannot be deleted between reboots. In that directory, the administrator places the files that must be identical or very similar on all systems.

For example, the administrator modifies the policy.conf file, and the default login and passwd files for this site. So, the administrator copies the following files to the permanent directory.

# mkdir /export/commonfiles
# cp  /etc/security/policy.conf \
# cp  /etc/default/login \
# cp  /etc/default/passwd \
/export/commonfiles

The administrator inserts a CD into the CD-ROM drive and allocates it.

# allocate cdrom0

After transferring the files to the CD, the administrator affixes a Trusted Path label.