Trusted Solaris Administrator's Procedures

To Set Security Attributes While Creating a Local File System

  1. Assume the System Administrator role and go to an ADMIN_HIGH workspace.

    See "To Work at a Different Label", if needed.

  2. Using the File Manager or the mkdir command, make the mount point directory.


    $ mkdir /newpublic
    
  3. Use the Set Mount Points Action to edit the /etc/vfstab file with the following entry:


    /dev/dsk/c0t3d0s3   /dev/rdsk/c0t3d0s3   /newpublic  ufs   2  yes	-
    
  4. Write and quit the file.

  5. Assume the Security Administrator role and go to an ADMIN_LOW workspace.

  6. Execute the newsecfs command with the options that specify the desired alternative security attributes, then mount the file system.

    The following example sets a label range of SECRET to SECRET.


    $ newsecfs -l "Secret;Secret" /newpublic
    $ mount /spublic
    

    See the newsecfs(1M) man page for details.