For a Site Without a Previously-existing Labels File

In most organizations, a version of the label_encodings(4) file is created by the Security Administrator role either before or after installation.

The Security Administrator can use the example label_encodings file in Appendix A, Example: Label Encodings File, which is based on a planning example in Chapter 5. The introduction to Appendix A describes the labels components defined in the example file.

Before Installation

To prepare a label_encodings(4) file in advance, the Security Administrator role can manually make a copy of the example in Appendix A, Example: Label Encodings File and make modifications in the copy. Alternatively, a label_encodings file can be created from the examples in this manual and in the Compartmented Mode Workstation Labeling: Encodings Format.

After Installation

The example label_encodings.simple file shown in Appendix A, Example: Label Encodings File can be found in the /etc/security/tsol directory, and this label encodings file can either be modified or used as is. Alternately, the default version of the label_encodings file or one of the other label_encodings files in /etc/security/tsol can be modified to suit a site's requirements. See Appendix B for the differences between the default single-label and multilabel files.