Label ranges are assigned to the following:
All hosts and networks with which communications are allowed
File systems
Allocatable devices: such as tape drives, floppy drives, CD drives, and audio devices
Other devices that are not allocatable: printers (controlled through a label range set on the name assigned to the printer) and workstations (controlled through a label range set on the framebuffer)
See the various means for setting labels described in Trusted Solaris Administrator's Procedures. "Managing Device Allocation and Setting Device Label Ranges" in Trusted Solaris Administrator's Procedures describes how to set label ranges on devices.