NAME | SYNOPSIS | DESCRIPTION | ATTRIBUTES | RETURN VALUES | FILES | SEE ALSO | NOTES
#include <tsol/label.h>int bslvalid(const bslabel_t * label);
The calling process must have
PRIV_SYS_TRANS_LABEL
in its set of effective privileges to inquire about labels that dominate the current process' sensitivity label.
These functions check the validity of binary labels.
bslvalid() examines label to determine if it is a valid sensitivity label for this system.
bclearvalid() examines clearance to determine if it is a valid clearance for this system.
See attributes(5) for descriptions of the following attributes:
ATTRIBUTE TYPE | ATTRIBUTE VALUE |
---|---|
Availability | SUNWtsu |
MT-Level | MT-Safe |
These routines return:
If the label_encodings file is inaccessible.
If the binary label is not valid for this system or is not dominated by the process' sensitivity label and the process does not have
PRIV_SYS_TRANS_LABEL
in its set of effective privileges,
If the binary label is valid for this system.
The label encodings file contains the classification names, words, constraints, and values for the defined labels of this system.
bcltobanner(3) , bilconjoin(3) , blcompare(3) , blinset(3) , blmanifest(3) , blminmax(3) , blportion(3) , bltocolor(3) , bltos(3) , bltype(3) , btohex(3) , hextob(3) , labelinfo(3) , labelvers(3) , sbltos(3) , stobl(3) , label_encodings(4)
Binary sensitivity labels are
valid
if they are contained in the
SYSTEM_ACCREDITATION_RANGE
as checked by
blinset(3)
.
bslvalid()
is a synonym for calling
blinset()
with the containing set of
SYSTEM_ACCREDITATION_RANGE
and is included for completeness.
Information labels (
IL
s) are not supported in Trusted Solaris 7 and later releases. Trusted Solaris software interprets any
IL
s on communications and files from systems running earlier releases as
ADMIN_LOW
.
Objects still have
CMW
labels, and
CMW
labels still include the
IL
component:
IL[SL]
; however, the
IL
component is fixed at
ADMIN_LOW
.
As a result, Trusted Solaris 7 has the following characteristics:
IL s do not display in window labels; SL s (Sensitivity Labels) display alone within brackets.
IL s do not float.
Setting an IL on an object has no effect.
Getting an object's
IL
will always return
ADMIN_LOW
.
Although certain utilities, library functions, and system calls can manipulate
IL
strings, the resulting
IL
s are always
ADMIN_LOW
, and cannot be set on any objects.
NAME | SYNOPSIS | DESCRIPTION | ATTRIBUTES | RETURN VALUES | FILES | SEE ALSO | NOTES