Trusted Solaris Label Administration

More About Clearance Labels

Clearance labels were introduced in "Introduction to Clearances, Minimum Labels, and Account Label Ranges". Clearance labels have the same components and internal representation as sensitivity labels.

Clearance Label Components

Each clearance label is made up of a classification and zero or more compartments, as shown in the following table.

Table 1-8 Components of a Clearance Label

Classification 

Compartments 

name 

[word1, word2, ..., wordN]

The example in Table 1-9 shows a clearance label that consists only of the classification INTERNAL_USE_ONLY with no compartments and another clearance label made up of a NEED_TO_KNOW classification and the compartments ENGINEERING and SALES.

Table 1-9 Components of Example Sensitivity Labels

Classification 

Compartments 

INTERNAL USE ONLY 

none 

NEED TO KNOW 

ENGINEERING, SALES 

Clearance Labels' Internal Representation

Besides its classification field, each clearance label has a 256 bit field available for compartments, as shown in the following table.

Table 1-10 Bits Available for Classification and Compartment Components

Classification Field 

Compartments Field 

32767 bits/256 values limit enforced 

256 bits