Single Sensitivity Label Version

This section describes the ACCREDITATION RANGE settings in the default label_encodings.single file, as shown in the following example.

Example B-2 ACCREDITATION RANGE Settings in the Default Single-label Encodings File

ACCREDITATION RANGE:  classification= s;
only valid compartment combinations:  s a b rel cntry1
minimum clearance= s Able Baker NATIONALITY: CNTRY1;
minimum sensitivity label= s A B REL CNTRY1;
minimum protect as classification= s;

The label_encodings.single file restricts the user ACCREDITATION RANGE in the ACCREDITATION RANGE section:

• SECRET defined as the only classification,

• SECRET A B REL CNTRY1 defined as the only valid compartment combination,

• SECRET ABLE BAKER NATIONALITY: CNTRY1 defined as the minimum clearance,

• SECRET A B REL CNTRY1 defined as the minimum sensitivity label, and

• SECRET defined as the minimum protect as classification

An easy way to run with a single sensitivity label is to change only the ACCREDITATION RANGE section in the label_encodings.single file. Alternately, you can create an encodings file from scratch with only one classification and with either no compartments or with only the compartments you need. See "To Replace the Single Label in the Default Single-Label Encodings File" for guidelines for both approaches.