Trusted Solaris Developer's Guide

Extended Operations

This section describes the extended operations and valid values you can pass to tsol_lbuild_create(3TSOL), tsol_lbuild_get(3TSOL), and tsol_lbuild_set(3TSOL). The values passed to tsol_lbuild_create() are stored in its return value of type ModLabelData where they can be accessed by calls to tsol_lbuild_get() and tsol_lbuild_set(). The ModLabelData structure is described in "ModLabelData Structure".

All extended operations are valid to pass to tsol_lbuild_get(3TSOL). However the *WORK* operations are not valid to pass to tsol_lbuild_set(3TSOL) or tsol_lbuild_create(3TSOL) because these values are set by Label builder according to end user input. These exceptions are noted in the descriptions.

LBUILD_MODE - You can tell tsol_lbuild_create() to create a user interface to build information labels, sensitivity labels, CMW labels, or clearances. Value is LBUILD_MODE_CMW by default.


Note -

Knowing how labels are configured for the system on which your application will run can help you know which mode to use. For example, you would not have a user build an information label on a system that does not use information labels. "Query System Security Configuration" in Chapter 2, Getting Startedexplains how to check the system security configuration.


LBUILD_VALUE_SL - The starting sensitivity label displayed in the Label field above the Update With field when the mode is LBUILD_MODE_SL. This value is ADMIN_LOW by default.

LBUILD_VALUE_CMW - The starting CMW label displayed in the Label field above the Update With field when the mode is LBUILD_MODE_CMW. This value is ADMIN_LOW[ADMIN_LOW] by default.

LBUILD_VALUE_CLR - The starting clearance displayed in the Label field above the Update With field when the mode is LBUILD_MODE_CL. This value is ADMIN_LOW by default.

LBUILD_USERFIELD - A character string prompt that displays at the top of the Label builder dialog box. Value is NULL by default.

LBUILD_SHOW - Show or hide the Label builder dialog box. Value is FALSE by default.

LBUILD_TITLE - A character string title that appears at the top of the Label builder dialog box. Value is NULL by default.

LBUILD_WORK_SL - The sensitivity label the end user is building. Value is updated to the end user's input when the end user selects the Update pushbutton or interactively chooses an option. Value is ADMIN_LOW by default. Not a valid extended operation for tsol_lbuild_set(3TSOL) or tsol_lbuild_create(3TSOL).

LBUILD_WORK_CMW - The CMW label the end user is building. Value is updated to the end user's input value when the end user selects the Update pushbutton or interactively chooses an option. Value is ADMIN_LOW[ADMIN_LOW] by default. Not a valid extended operation for tsol_lbuild_set(3TSOL)or tsol_lbuild_create(3TSOL)

LBUILD_WORK_CLR - The clearance the end user is building. Value is updated to the end user's input value when the end user selects the Update pushbutton or interactively chooses an option. Value is ADMIN_LOW by default. Not a valid extended operation for tsol_lbuild_set(3TSOL) or tsol_lbuild_create(3TSOL)

LBUILD_X - The X offset in pixels from the top-left corner of the Label builder dialog box in relation to the top-left corner of the screen. By default the Label builder dialog box is positioned in the middle of the screen.

LBUILD_Y - The Y offset in pixels from the top-left corner of the Label builder dialog box in relation to the top-left corner of the screen. By default the Label builder dialog box is positioned in the middle of the screen.

LBUILD_UPPER_BOUND - The highest classification (and related compartments and markings) available to the user as radio buttons for interactively building a label or clearance. A value you supply should be within the user's accreditation range. If no value is supplied, this value is the user's workspace sensitivity label, or if the executable has the sys_trans_label privilege, this value is the user's clearance.

LBUILD_LOWER_BOUND - The lowest classification (and related compartments and markings) available to the user as radio buttons for interactively building a label or clearance. This value is the user's minimum label.

LBUILD_CHECK_AR - Check that the user-built label is within the user's accreditation range. A value of 1 means check and a value of 0 means do not check. If the label is out of range, an error message is raised to the end user. The default is check.

LBUILD_VIEW - Use the internal or external label representation. Value is LBUILD_VIEW_EXTERNAL by default.