In the Oracle Solaris OS, the Trusted Extensions service, svc:/system/labeld:default, is disabled by default.
The labeld service attaches labels to communications endpoints. For example, the following are labeled:
All zones and the directories and files within each zone
All network communications
All processes including window processes