NAME | SYNOPSIS | DESCRIPTION | ATTRIBUTES | RETURN VALUES | EXAMPLES | SEE ALSO | NOTES
#include <tsol/label.h> typedef binary_level_range { blevel_t lower_bound; blevel_t upper_bound; } brange_t;int blequal(const blevel_t * label1 , const blevel_t * label2);
These functions compare binary labels for meeting a particular condition.
blequal() compares two levels for equality.
bldominates() compares level label1 for dominance over level label2 . blstrictdom() compares level label1 for strict dominance over level label2 . bildominates() compares information label label1 for dominance over information label label2 . bimdominates() compares information label markings sets label1 for dominance over information label markings sets label2 .
blinrange() compares level label for dominance over range -> lower_bound and range -> upper_bound for dominance over level label .
See attributes(5) for descriptions of the following attributes:
ATTRIBUTE TYPE | ATTRIBUTE VALUE |
---|---|
Availability | SUNWtsu |
MT-Level | MT-Safe |
These functions return non-zero if their respective conditions are met, otherwise zero is returned.
The following example shows how to compare all parts of two binary labels:
blequal(bcltosl(&cmw_label1), bcltosl(&cmw_label2)) && bilequal(bcltoil(&cmw_label1), bcltoil(&cmw_label2))
bcltobanner(3) , blinset(3) , blmanifest(3) , blminmax(3) , blportion(3) , bltos(3) , bltype(3) , blvalid(3) , btohex(3) , hextob(3) , labelinfo(3) , labelvers(3) , sbltos(3) , stobl(3)
Information labels (
IL
s) are not supported in Trusted Solaris 7 and later releases. Trusted Solaris software interprets any
IL
s on communications and files from systems running earlier releases as
ADMIN_LOW
.
Objects still have
CMW
labels, and
CMW
labels still include the
IL
component:
IL[SL]
; however, the
IL
component is fixed at
ADMIN_LOW
.
As a result, Trusted Solaris 7 has the following characteristics:
IL s do not display in window labels; SL s (Sensitivity Labels) display alone within brackets.
IL s do not float.
Setting an IL on an object has no effect.
Getting an object's
IL
will always return
ADMIN_LOW
.
Although certain utilities, library functions, and system calls can manipulate
IL
strings, the resulting
IL
s are always
ADMIN_LOW
, and cannot be set on any objects.
NAME | SYNOPSIS | DESCRIPTION | ATTRIBUTES | RETURN VALUES | EXAMPLES | SEE ALSO | NOTES