If Your Site Does Not Have a Labels File

In most organizations, a version of the label_encodings(4) file is created by the security administrator role either before or after installation.

Appendix A, Example: Label Encodings File shows an example label_encodings file that is based on the planning described in Chapter 5, Example: Planning an Organization's Labels.

After Installation

An example label_encodings.simple file is in the /etc/security/tsol directory, and it can either be modified or used as is. The introduction to Appendix A, Example: Label Encodings File describes the labels and compartments defined in the example file. Alternately, the default version of the label_encodings file or one of the other label_encodings files in /etc/security/tsol can be modified to suit a site's requirements.

Before Installation

To prepare a label_encodings(4) file in advance, the security administrator role can make a manual copy of the example in Appendix A, Example: Label Encodings File and make modifications in the copy. Alternatively, a label_encodings file can be created using the examples in this manual and in the DIA document.

Creating Labels With Complex Relationships

This manual does not show how to encode the complex relationships between classifications, inverse, and hierarchical words that are sometimes needed. For that level of detail and for further reference, see the Compartmented Mode Workstation Labeling: Encodings Format: Defense Intelligence Agency document [DDS-2600-6216-93], Sun part number 805-8062-10, which is included in the Trusted Solaris document set.