Trusted Solaris Label Administration

How Compartment Words Are Defined

Compartment words are optionally defined in the WORDS subsection for each label type. Each compartment word is assigned to one or more bits. The following example shows the SUN FEDERAL compartment word specified with a short name (sname) of SUNFED and compartment bits 40-50.

Example 1-1 Example Compartment Definition for a Sensitivity Label

SENSITIVITY LABELS:

WORDS:

name= SUN FEDERAL; sname= SUNFED; compartments= 40-50;

Along with its classification field, each label has a 256 bit compartment field. Each bit is assignable in zero or more compartment words, as shown in Table 1-3. One or more compartment bits can be assigned to each compartment word. Out of the 255 available bits, the number of compartment words that can be created is practically limitless.

Table 1-3 Bits Available for Classification and Compartment Components


Classification Field	Compartments Field
15 bits/32,767 possible values/256 values limit enforced	256 bits

The following table can be used to keep track of comparment bit assignments.

Table 1-4 Compartment Bit Tracking Table