NAME | SYNOPSIS | DESCRIPTION | RETURN VALUES | ATTRIBUTES | EXAMPLES | SEE ALSO | NOTES
#include <tsol/label.h>bslabel_t * bcltosl(bclabel_t * label);
These functions provide pointers to, extract, and replace portions of binary labels.
bcltosl() and bcltoil() provide a pointer to the sensitivity Label and information label portion of the binary CMW label label respectively.
getcsl() and getcil() copy the sensitivity label and information label portion of the binary CMW label source_label to the binary sensitivity label and binary information label destination_label respectively.
setcsl() and setcil() replace the value of the sensitivity label and information label portion of the binary CMW label destination_label with the value of the binary sensitivity label and binary information label source_label respectively.
bcltosl() and bcltoil() return a pointer to their respective label types.
See attributes(5) for descriptions of the following attributes:
ATTRIBUTE TYPE | ATTRIBUTE VALUE |
---|---|
Availability | SUNWtsu |
MT-Level | MT-Safe |
The following example shows how to compare the sensitivity label portion of a binary CMW label with a file's binary sensitivity label.
blequal(bcltosl(&cmw_label), &file_sensitivity_label)
bcltobanner(3) , bilconjoin(3) , blcompare(3) , blinset(3) , blmanifest(3) , blminmax(3) , bltocolor(3) , bltos(3) , bltype(3) , blvalid(3) , btohex(3) , hextob(3) , labelinfo(3) , labelvers(3) , sbltos(3) , stobl(3)
Information labels (
IL
s) are not supported in Trusted Solaris 7 and later releases. Trusted Solaris software interprets any
IL
s on communications and files from systems running earlier releases as
ADMIN_LOW
.
Objects still have
CMW
labels, and
CMW
labels still include the
IL
component:
IL[SL]
; however, the
IL
component is fixed at
ADMIN_LOW
.
As a result, Trusted Solaris 7 has the following characteristics:
IL s do not display in window labels; SL s (Sensitivity Labels) display alone within brackets.
IL s do not float.
Setting an IL on an object has no effect.
Getting an object's
IL
will always return
ADMIN_LOW
.
Although certain utilities, library functions, and system calls can manipulate
IL
strings, the resulting
IL
s are always
ADMIN_LOW
, and cannot be set on any objects.
NAME | SYNOPSIS | DESCRIPTION | RETURN VALUES | ATTRIBUTES | EXAMPLES | SEE ALSO | NOTES