Trusted Solaris Label Administration

To Make Your Own Single-label Encodings File

In the Security Administrator role in an ADMIN_HIGH workspace, open the label_encodings file for editing.

See "To Modify the label_encodings File" if needed.

Create an encodings file with only one classification and only the desired compartments.

For example, you could set up a label_encodings file with the INTERNAL_USE_ONLY classification, and specify no words.

VERSION= Single-label Encodings

. . .
CLASSIFICATIONS:

name= INTERNAL_USE_ONLY;       sname= INTERNAL;  value= 5;

INFORMATION LABELS:

WORDS:

SENSITIVITY LABELS:

WORDS:

CLEARANCES:

WORDS:

CHANNELS:

WORDS:

PRINTER BANNERS:

WORDS:

In the ACCREDITATION RANGE section, include only one classification and one valid compartment combination.

Make the settings in the ACCREDITATION RANGE section shown in the example using your own classification, and your own compartment words, if any.

ACCREDITATION RANGE:

classification= INTERNAL;
only valid compartment combinations:

INTERNAL

minimum clearance= INTERNAL;
minimum sensitivity label= INTERNAL;
minimum protect as classification= INTERNAL;

Encode the LOCAL DEFINITIONS section as described in Chapter 4, Modifying Sun's Extensions in the Local Definitions Section , making sure to specify Default Label View is External.

Configure labels not visible to users.

See "To Configure Labels Not Visible to Users".