Trusted Solaris Label Administration

Procedures for Modifying Sun Extensions

To Specify the System Default for Administrative Label Names (Optional)

  1. In the Security Administrator role in an ADMIN_HIGH workspace, open the label_encodings file for editing.

    See "To Modify the label_encodings (4) File", if needed.

  2. Find the lines in the LOCAL DEFINITIONS section that define the Default Label View.


    Default Label View Is External
  3. To allow the label names to display, ensure that the line that begins Default Label View is set to Internal.


    Default Label View Is Internal
  4. When you are done, save and close the file.

To Change Label Component Names Used in Label Builders (Optional)

  1. In the Security Administrator role in an ADMIN_HIGH workspace, open the label_encodings file for editing.

    See "To Modify the label_encodings (4) File", if needed.

  2. Find the line in the LOCAL DEFINITIONS section that defines the labels components names used in label builder dialog boxes.


    Classification Name= Class;
    Compartments Name= Comps;
  3. If desired, change the defaults Class, and Comps.

    The example shows the alternate names used in label_encodings.simple.


    Classification Name= Classification;
    Compartments Name= Departments;
  4. If you are done, save and close the file.

To Specify a Default User Clearance and Minimum Label (Optional)

  1. In the Security Administrator role in an ADMIN_HIGH workspace, open the label_encodings file for editing.

    See "To Modify the label_encodings (4) File", if needed.

  2. Find the line in the LOCAL DEFINITIONS section that begins with Default User Sensitivity Label.


    Default User Sensitivity Label= u;
    Default User Clearance= c;
  3. Replace the Sensitivity Label with your desired minimum user label:

    The following example shows a new minimum label of c.


    Default User Sensitivity Label= c;
    
  4. Replace the Clearance with your desired user clearance:

    The following example shows a new clearance of s.


    Default User Clearance= c;
    
  5. If you are done, save and close the file.

To Assign a Color to a Label or Word


Note -

If no color is defined for a classification in the COLOR NAMES section of the label_encodings file, the color black is used.


  1. In the Security Administrator role, open the label_encodings file for editing.

    See "To Modify the label_encodings (4) File", if needed.

  2. Find the COLOR NAMES section.


    COLOR NAMES:
              label= Admin_Low;       color= #bdbdbd;    
              label= u;       color= green; 
              label= c;       color= blue;  
    
              label= s;       color= yellow; 
              label= ts;      color= red; 
    
              word= sb;       color= cyan; 
              word= cc;       color= magenta;
    
              label= Admin_High;      color= #636363;
  3. Optionally, define colors for individual compartment words.

    To distinguish certain compartment words irrespective of the classification with which they may be associated, assign a separate color to those words.


    word= EMG; color= RedOrange;
  4. Optionally, define colors for labels.

    In the example, the color assigned to NEED_TO_KNOW SYSADM is bluePurple.


    label= NEED TO KNOW SYSADM; color= bluePurple;
  5. Make sure a color is defined for each classification.

    If a color is not defined for a classification, the background color used is black, so, make sure to define every classification.

    In the screen below, the classification REGISTERED is assigned the color red, and the NEED_TO_KNOW SYSADM classification is assigned the color blue.


    label= REGISTERED;  color= red;
    label= NEED TO KNOW; color= blue;
  6. If you are done, save and close the file.