Trusted Solaris Administration Overview

Previous: Chapter 4 Administering Auditing


A

	accreditation checks ( )

	accreditation ranges
		label encodings file ( )
		network interfaces ( )

	actions
		in rights ( )
		running ( )

	add_allocatable command ( )

	Add Allocatable Device action ( )

	Admin Editor action ( ) ( )

	ADMIN_HIGH label ( )

	ADMIN_LOW label ( )

	administrative actions
		accessing ( )
		Add Allocatable Device ( )
		Admin Editor ( )
		Audit Classes ( )
		Audit Control ( )
		Audit Events ( )
		Audit Startup ( )
		Check Encodings ( )
		Check TN Files ( )
		Check TN NIS+ Tables ( )
		Configure Selection Confirmation ( )
		Create NIS+ Client ( )
		Create NIS+ Server ( )
		Create NIS Client ( )
		Create NIS Server ( )
		Edit Encodings ( )
		Name Service Switch ( )
		Set Mail Options ( )
		Set Mount Attributes ( )
		Set Mount Points ( )
		Set TSol Gateways ( )
		Share Filesystems ( )

	administrative labels ( )

	administrative roles ( )

	`adminvi`(1M) command, default editor for administrative actions ( )

	adornfc command ( )

	adornment ( )

	adornments ( )

	Application Manager, accessing applications ( )

	applications
		accessing ( )
		administering ( )
		trusted ( )

	assigning privileges ( )

	audit_class file ( )
		action for editing ( )

	audit classes ( )

	Audit Classes action ( )

	audit command ( )

	Audit Control action ( )

	audit_control file, action for editing ( )

	audit_event file ( ) ( )

	Audit Events action ( )

	Audit Startup action ( )

	audit_startup command, action for editing ( )

	audit_startup script ( )

	audit_user file ( )

	audit_warn script ( )

	auditconfig command ( )

	auditing
		configuration files ( )
		planning ( ) ( )
		process privileges ( )
		system privileges ( )

	auditreduce command ( )

	auditstat command ( )

	authorizations
		categories ( )
		Change File Owner ( )
		granted ( )
		in rights ( )
		in software administration ( )
		list ( )


B

	booting the computer ( )

	broadcast messages ( )


C

	Check Encodings action ( )

	Check TN Files action ( )

	Check TN NIS+ Tables action ( )

	`chk_encodings` command, action for invoking ( )

	CIPSO host type ( )

	classification label component ( )

	clearances
		label overview ( )
		network interfaces ( )
		remote host templates ( ) ( )

	closed networks ( )

	colormaps ( )

	commands
		add_allocatable ( )
		adornfc ( )
		allocate ( )
		arp ( )
		deallocate ( )
		dminfo ( )
		getfattrflag ( ) ( )
		getfpriv ( )
		getfsattr ( )
		getfsattr_ufs ( )
		getlabel ( )
		getmldadorn ( )
		getsldname ( )
		ifconfig ( )
		in rights ( )
		ipcs ( )
		list_devices ( )
		mkdir ( )
		mldpwd ( )
		mldrealpath ( )
		mount ( )
		ndd ( )
		netstat ( ) ( )
		newsecfs ( )
		nfsd ( )
		nfsstat ( )
		pattr ( )
		pclear ( )
		plabel ( )
		ppriv ( )
		pprivtest ( )
		rdate ( )
		rmdir ( )
		route ( )
		setfattrflag ( )
		setfpriv ( )
		setfsattr ( )
		setlabel ( )
		share ( )
		share_nfs ( )
		snoop ( ) ( )
		spray ( )
		testfpriv ( )
		tnchkdb ( )
		tnctl ( )
		tnd ( )
		tninfo ( )
		tokmapctl ( )
		tokmapd ( )
		trusted applications ( )
		unshare ( )

	compartment label component ( )

	component definitions, label encodings file ( )

	configuration management ( )

	Configure Selection Confirmation action ( )

	console redirection ( )

	covert channel delays ( )

	Create NIS+ Client action ( ) ( )

	Create NIS+ Server action ( ) ( )

	customizations, label encodings file ( )


D

	DAC ( )

	databases
		tnidb ( )
		tnrhdb ( )

	`defaultrouter` file, action for editing ( )

	defaults
		privileges ( )
		rights ( )

	device_allocate file, action for editing ( )

	Device Allocation Manager ( )

	device_maps file, action for editing ( )

	devices
		allocation ( )
		clean scripts ( ) ( )
		configuration files ( )
		label ranges ( )
		protecting ( )

	`dfstab` file, action for editing ( )

	DGA (direct graphics access), window privileges ( )

	dominance of labels ( )

	`dtpad`(1) command, using in administrative actions ( )


E

	Edit Encodings action ( )

	emetrics ( )

	`/etc/defaultrouter` file, action for editing ( )

	`/etc/mail/sendmail.cf` file, action for editing ( )

	`/etc/motd` file, action for editing ( )


F

	File Manager, accessing applications ( )

	file systems
		administering attributes ( )
		mounting ( )
		privileges ( )

	font paths ( )

	Front Panel, accessing applications ( )


G

	gateway host ( )

	getfattrflag command ( )

	getmldadorn command ( )

	getsldname command ( )

	GIDs
		in rights ( )
		network interfaces ( )


H

	host types
		in Trusted Solaris ( )
		networking ( )


I

	inter-window movement ( )

	IP addresses, tnrhdb database ( )

	IP labels, remote host templates ( )

	IPC ( )


L

	label_encodings file, action for editing and checking ( )

	label encodings file, contents ( )

	label ranges
		assigning to devices ( )
		in rights ( )

	labels
		classification component ( )
		compartment component ( )
		dominance ( )
		network interfaces ( )
		overview ( )
		privileges for overriding ( )
		relationships ( )
		remote host templates ( )
		well-formed ( )

	linking ( )

	loadable modules ( )

	login authorizations ( )


M

	MAC ( )

	maximum labels, remote host templates ( )

	media labeling, clean scripts ( )

	message queues ( )
		overriding restrictions ( )

	minimum labels, remote host templates ( )

	mkdir command ( )

	mldpwd command ( )

	mldrealpath command ( )

	`motd` file, action for editing ( )

	mounting
		defined ( )
		overview ( )

	multilevel port bindings ( )


N

	Name Service Switch action ( )

	network configuration databases ( )

	network interfaces, tnidb database ( )

	network packets ( )

	networks
		example ( )
		modified Solaris commands ( )
		privileges ( )
		Trusted Solaris commands ( ) ( )

	`niscat` command, action to invoke ( )

	`nisclient` command, action for creating NIS+ client ( )

	`nispopulate` command, action for invoking ( )

	`nisserver`(1M) file, action for invoking ( )

	`nisserver` file, action for invoking ( )

	`nsswitch.conf` file, action for editing ( )


O

	object reuse ( )

	open networks ( )


P

	pattr command ( )

	permissions, overriding ( )

	plabel command ( )

	Populate NIS+ Tables action ( )

	port bindings ( )

	ppriv command ( )

	pprivtest command ( )

	praudit command ( )

	primary administrator ( )

	printing definitions, label encodings file ( )

	privilege sets ( )

	privileges
		categories ( ) ( ) ( ) ( )
			process privileges ( )
			System V IPC privileges ( )
			window privileges ( )
		in rights ( )
		inheritable ( )
		network interfaces ( )
		remote host templates ( )

	process privileges ( )

	profile shell ( )

	profiles ( )


R

	remote hosts, tnrhdb ( )

	`resolv.conf` file, action for editing ( )

	rights
		All ( )
		All Authorizations ( )
		Audit Control ( )
		Audit Review ( )
		Basic Actions ( )
		Basic Commands ( )
		Convenient Authorizations ( )
		Cron Management ( )
		Custom Admin Role ( )
		Custom Admin Secadmin Role ( )
		Custom Oper Role ( )
		Custom Root Role ( )
		default ( )
		Device Security ( )
		Enable Login ( )
		File System Management ( )
		File System Security ( )
		Mail Management ( )
		Maintenance and Repair ( )
		Media Backup ( )
		Media Restore ( )
		Network Management ( )
		Object Access Management ( )
		Object Label Management ( )
		Object Privilege Management ( )
		Outside Accred ( )
		Privileged Shells ( )
		Process Management ( )
		User Management ( )
		User Security ( )

	Rights Manager, assigning inheritable privileges ( )

	RIPSO host type ( )

	rm command ( )

	roles ( )

	route command
		example ( )
		Set Default Routes action ( )

	routing ( ) ( )
		example ( )
		loading data at boot time ( )
		tables ( )
		through non-Trusted Solaris clusters ( )

	routing commands, examples ( )


S

	SAMP (Security Attribute Modulation Protocol), Trusted Solaris data packets ( )

	security administrator ( )

	security attributes, in data packets ( )

	security domain ( )

	security policy, overriding ( )

	sel_config file, action for editing ( )

	semaphore sets, overriding restrictions ( )

	`sendmail.cf` file, action for editing ( )

	`sendmail` command ( )

	session range ( )

	Set Daily Message action ( )

	Set Default Routes action ( )

	Set DNS Server action ( )

	Set Mail Options action ( )

	Set Mount Attributes action ( )

	Set Mount Points action ( )

	Set Tsol Gateways action ( )

	Share Filesystems action ( )

	shared memory regions, overriding restrictions ( )

	SMC Computers and Networks Tool ( )

	SMC Interface Manager Tool ( )

	sun_tsol host type ( )

	system administrator ( )

	system configuration ( )

	system operator ( )

	system security ( )

	system security configuration, networks ( )

	System V IPC ( )


T

	/tmp directory, as an MLD ( )

	tnchkdb command, action for checking ( )

	tnidb database
		action for checking ( )
		default values ( )

	tnrhdb database
		action for checking ( ) ( )
		remote hosts ( )

	tnrhtp database
		action for checking ( ) ( )

	trusted applications
		CDE actions ( )
		commands ( )
		defined ( )
		enhanced desktop tools ( )
		Solaris Management Console ( )

	trusted_edit shell script, use in administrative actions ( )

	trusted path attribute ( )

	tsix host type ( )

	`tsolgateways` file, action for editing ( )

	tunneling ( )


U

	UIDs
		in rights ( )
		network interfaces ( )

	unlabeled host type ( )

	users, session range ( )


V

	`vfstab_adjunct` file, action for editing ( )

	`vfstab` file, action for editing ( )

	View Table Attributes action ( )

	View Table Contents action ( )


W

	well-formed labels ( )

	windows, privileges ( )


X

	X server, window privileges ( )


Y

	`ypinit` command, action for creating NIS client ( )

Previous: Chapter 4 Administering Auditing