test

Trusted Solaris Installation and Configuration

How to Install a Label Encodings File

Consult Trusted Solaris Label Administration for requirements, procedures, and suggestions for the label encodings file.

You can edit the placeholder label_encodings(4) file that the Trusted Solaris installation program installed, or install your own. The security administrator is responsible for editing, checking, and maintaining the label_encodings file.

Note -

The label_encodings file is protected at the label ADMIN_HIGH. For security, copy, edit, check and install your label encodings file at ADMIN_HIGH.

To Install a Site-Specific Label Encodings File

  1. In the root role (before other roles are created), or in the secadmin role (after roles have been created and verified), create an ADMIN_HIGH workspace.

    See "How to Create an Admin_High Workspace" if you are unfamiliar with operating at the label ADMIN_HIGH.

  2. Copy your site's label encodings file from an ADMIN_HIGH diskette to a writable location, such as /export/clientfiles/label_encodings.site using the File Manager.

    If you are unsure of the steps, see "To Copy from a Diskette".

    If you plan to tweak the file, make sure that the file itself is writable.

  3. Check the syntax of the new label encodings file.

    1. Double-click the Check Encodings action in the System_Admin folder in the Application Manager.

      For more information on running a script from the System_Admin action, see "To Run a Script from the System_Admin Folder". You can ignore any Trash Can Error dialog error messages.

    2. In the dialog box, enter the full path name of the file: /export/clientfiles/label_encodings.site

  4. Read the contents of the Check Encodings dialog box that is displayed.

    The chk_encodings(1M) command checks the syntax of the file. If the file passes the check, the action asks whether you want to overwrite the currently-installed label_encodings file. If the answer is yes, the action creates a backup copy (naming it label_encodings.orig), installs the checked version, then restarts the label daemon.

    CONTINUE

    Only if it reports no errors can you continue installing.

    RESOLVE ERRORS

    If it reports errors, they must be resolved before continuing with installation.

    For detailed procedures and explanation, consult "Creating or Editing the Encodings File" in Trusted Solaris Label Administration.

    Caution - Caution -

    Your label encodings file must pass the Check Encodings test before you continue.