How to Add a Remote Host Template

The tnrhtp(4) file installed by the Trusted Solaris installation CDs contains examples of templates that match the label_encodings(4) file installed by the Trusted Solaris installation CDs. Sites who install a site-specific label_encodings file must create templates that match the labels that they recognize, as described the following procedure.

To Add a Remote Host Template

1. At the label ADMIN_LOW, in an administrative role, initially the root role, invoke the Solaris Management Console from the Application Manager.

   If you are unfamiliar with accessing the Solaris Management Console, see "To Initialize the SMC Server". Note that the SMC must be initialized before use.

2. Click this_host: Scope=Files, Policy=TSOL under Trusted Solaris Management Console in the Navigation pane.

   ---

   Note -

   If toolbox icons display as red stop signs, the toolboxes will not load. To load them, do Step 4.

   ---

3. Click Trusted Solaris Configuration, then Computers and Networks, then double-click Security Families.

   The existing templates are displayed in the View pane.

   ---

   Note -

   If you installed a site-specific label_encodings file, it is highly likely that the existing templates will not work with your file. The tnrhtp must contain templates that reflect the labels of machines and networks your site can contact.

   ---

   You should have templates for:

   1. The Trusted Solaris hosts that this machine can contact.

   2. Any unlabeled hosts/networks that this machine can contact..

4. Choose Add Template from the Action menu.

5. In the Basic Information tab, create a template named unlab_userlabel, of host type Unlabeled, with an ADMIN_HIGH clearance and a process label of low_user_label.

   The default Failed Cross Reference Format must dominate the default label. The label ADMIN_HIGH dominates all labels.

6. Click OK when the template is complete.

7. Return to the procedure and chapter you are working from.