Trusted Extensions Configuration and Administration

Rules When Changing the Level of Security for Data

By default, regular users can perform cut-and-paste and copy-and-paste on files. The source and target must be at the same label. To change the label of files, or the label of information within files requires authorization. The following table summarizes the rules for file relabeling.

Table 11  Conditions for Moving Files to a New Label

Transaction Description Label Relationship Owner Relationship Required Authorization Copy and paste, or cut and paste Same label Same UID None Downgrade information Same UID solaris.label.file.downgrade Upgrade information Same UID solaris.label.file.upgrade Downgrade information Different UIDs solaris.label.file.downgrade Upgrade information Different UIDs solaris.label.file.upgrade