Readying the Label Encodings File Before the NIS+ Master or Standalone System is Configured

The overall process of configuring the label_encodings file is described below:

• Before the install team starts post-installation configuration on the NIS+ master or on a standalone system, the security administrator finishes the analysis and planning described in Chapter 1, Introduction to Trusted Solaris Label Encodings.

• The security administrator prepares a site-specific security policy, decides what labels the site needs and which computer users can work at which labels, and prepares guidelines for the install team to follow when configuring users and hosts.

• The security administrator role prepares the label_encodings(4) file, as described in this chapter.

  If no label_encodings file has been used previously at the site, the security administrator role can create one by doing one of the following:

  • Typing in and modifying a copy of the label_encodings files shown in Appendix A, Example: Label Encodings File

  • Waiting until after installation to copy and modify a demonstration file.

    ---

    Note -

    The security administrator role can make the site's modifications after Trusted Solaris is installed on the host and before the install team completes the configuration. However, since creating the label_encodings file is usually a lengthy process, it is recommended that the encodings file be prepared beforehand.

    ---

• The install team installs the site-specific label_encodings file before finishing the configuration.