Trusted Solaris Label Administration

When Using Either a Government-furnished or Already-Existing Labels File

Some organizations use a government-furnished label_encodings(4) file that is based on Defense Intelligence Agency (DIA) specifications. For a detailed description and for further reference, see the "Preface" in Compartmented Mode Workstation Labeling: Encodings Format, Defense Intelligence Agency document [DDS-2600-6216-93], Sun part number 805-8062-10, which is included in the Trusted Solaris administrator's document set. Sun has added extensions to the government-furnished file in the LOCAL DEFINITIONS section (local meaning local to Sun's implementation). The LOCAL DEFINITIONS section sets various label translation options and assigns colors to labels.

The security administrator role at a site with its own government-furnished label_encodings file should modify the LOCAL DEFINITIONS: section from one of the Trusted Solaris label_encodings files in /etc/security/tsol and append the section to the organization's label_encodings file before it is installed. Chapter 4, Modifying Sun's Extensions in the Local Definitions Section describes how to append the Sun extensions to your file and modify the extensions for your site.