Trusted Solaris Label Administration

Procedures for Modifying Sun Extensions

To Change the Names of Administrative Labels (Optional)

  1. In the security administrator role in an ADMIN_LOW workspace, open the label_encodings file for editing.

    See "To Modify the label_encodings (4) File", if needed.

  2. Find the lines in the LOCAL DEFINITIONS section that define the administrative label names.


    *Admin Low Name= site_low;
    *Admin High Name= site_high;
  3. Remove the asterisk (*) comment sign from the beginning of the lines that define the administrative names

  4. If desired, replace site_low and site_high with names that are consistent with your site's security policy.


    Admin Low Name= your_choice;
    Admin High Name= your_choice;
  5. If you are done, save and close the file.

To Specify the System-wide Viewing of Administrative Label Names (Optional)

  1. In the security administrator role in an ADMIN_LOW workspace, open the label_encodings file for editing.

    See "To Modify the label_encodings (4) File", if needed.

  2. Find the lines in the LOCAL DEFINITIONS section that define the Default Label View.


    Default Label View Is Internal
  3. Ensure that the line that begins Default Label View is set to Internal as shown.

  4. If you are done, save and close the file.

To Specify the System-wide Viewing of Substitute Names for Administrative Labels (Optional)

  1. In the security administrator role in an ADMIN_LOW workspace, open the label_encodings file for editing.

    See "To Modify the label_encodings (4) File", if needed.

  2. Find the line in the LOCAL DEFINITIONS section that begins with Default Label View.


    Default Label View Is Internal
  3. Ensure that the default label view is set to External, as shown below:


    Default Label View Is External
    
  4. If you are done, save and close the file.

To Change Label Component Names Used in Label Builders (Optional)

  1. In the security administrator role in an ADMIN_LOW workspace, open the label_encodings file for editing.

    See "To Modify the label_encodings (4) File", if needed.

  2. Find the line in the LOCAL DEFINITIONS section that defines the labels components names used in label builder dialog boxes.


    Classification Name= Class;
    Compartments Name= Comps;
  3. If desired, change the defaults Class, and Comps.

    The example shows the alternate names used in label_encodings.simple.


    Classification Name= Classification;
    Compartments Name= Departments;
  4. If you are done, save and close the file.

To Assign a Color to a Label or Word


Note -

If no color is defined for a classification in the COLOR NAMES section of the label_encodings file, the color black is used.


  1. In the security administrator role, open the label_encodings file for editing.

    See "To Modify the label_encodings (4) File", if needed.

  2. Find the COLOR NAMES section.


    COLOR NAMES:
              label= Admin_Low;       color= #bdbdbd;    
              label= u;       color= green; 
              label= c;       color= blue;  
    
              label= s;       color= yellow; 
              label= ts;      color= red; 
    
              word= sb;       color= cyan; 
              word= cc;       color= magenta;
    
              label= Admin_High;      color= #636363;
  3. Optionally, define colors for individual compartment words.

    To distinguish certain compartment words irrespective of the classification with which they may be associated, assign a separate color to those words.


    word= EMG; color= RedOrange;
  4. Optionally, define colors for sensitivity labels.

    In the example, the color assigned to NEED_TO_KNOW SYSADM is bluePurple.


    label= NEED TO KNOW SYSADM; color= bluePurple;
  5. Make sure a color is defined for each classification.

    If a color is not defined for a classification, the background color used is black, so, make sure to define every classification.

    In the screen below, the classification REGISTERED is assigned the color red, and the NEED_TO_KNOW SYSADM classification is assigned the color blue.


    label= REGISTERED;  color= red;
    label= NEED TO KNOW; color= blue;

    The three steps shown combined in the following example have the following results:

    • Any label with the word EMG always displays with the color RedOrange.

    • The label NEED_TO_KNOW SYSADM always displays with the color orange.

    • Any other label containing the NEED_TO_KNOW classification displays with the color blue (unless the label contains the word EMG).

    • Any label with the REGISTERED classification displays with the color red

    • Any label with any classification not defined displays with the color black


    word= EMG; color= RedOrange;
    label= NEED TO KNOW SYSADM; color= bluePurple;
    label= REGISTERED;  color= red;
    label= NEED TO KNOW; color= blue;
  6. If you are done, save and close the file.