Trusted Solaris Developer's Guide

Privileged Operations

The process needs proc_setclr privilege in its effective set to change its process clearance so it is not equal to its current clearance.

The process needs the sys_trans_label privilege in its effective set to translate a binary clearance to text when the process sensitivity label does not dominate the clearance to be translated. This privilege is also needed to check if a clearance is valid when the process sensitivity label does not dominate the clearance.