Sensitivity Labels

Trusted Solaris uses a string called a sensitivity label (SL) (containing a classification and compartments in similar fashion to clearances) to determine which information you can access. Sensitivity labels may be displayed inside square brackets ([]) in window title bars, in the trusted stripe (a special area at the bottom of the screen), or not at all, depending on how your system is configured. Figure 1-3 shows a configuration configured to display sensitivity labels; the sensitivity labels and trusted stripe are indicated.

Figure 1-3 Typical Environment with Sensitivity Labels Displayed

All subjects and objects in a system have sensitivity labels. A subject is an active entity, usually a process (running program), that causes information to flow among objects or changes the system state. An object is a passive entity that contains or receives data, such as a data file, directory, printer, or other device. In some cases, a process may be an object, such as when you use kill on a process.