Trusted Extensions establishes tighter security defaults than the Oracle Solaris OS:
By default, device allocation is enabled.
By default, device allocation requires authorization. Therefore, by default, regular users cannot use removable media.
An administrator can remove the authorization requirement. However, device allocation is typically required at sites that install Trusted Extensions.
Regular users can print only to printers that include the user's label in the printer's label range.
By default, printed output has trailer and banner pages. These pages, and the body pages, include the label of the print job.
Roles are available in the Oracle Solaris OS, but their use is optional. In Trusted Extensions, roles are required for proper administration.