man pages section 1: User Commands

setlabel(1)

NAME

setlabel- sets the CMW label for files

SYNOPSIS

setlabel

-s

-h

newlabel

filename

DESCRIPTION

setlabel sets the CMW label associated with each filename. Unless newlabel and filename have been specified, no labels will be set. Incremental changes to labels are supported.

Refer to setcmwlabel(2) for a complete description of the conditions required to satisfy, and the privileges needed to execute this command.

Users may enter a label in plain text in the following form:

{ + } { classification } { { + | - } word } ...

Items in curly brackets are optional. A vertical bar (|) represents a choice between two items. Items followed by an ellipsis may be repeated zero or more times. Leading and trailing whitespace is ignored. Items may be separated by blanks, tabs, commas or slashes (/).

The system always displays labels in uppercase. Users may enter labels in any combination of uppercase and lowercase.

The classification part of the label must be a valid classification name as defined in label_encodings(4). Classification names may contain embedded blanks or punctuation, if they are so defined in the label_encodings file. Short and long forms of classification names may be used interchangeably.

The words compartments and markings used in labels must be valid words as defined in label_encodings. Words may contain embedded blanks or punctuation if they are so defined in label_encodings.

Short and long forms of words may be used interchangeably. Words may be specified in any order; however, they are processed left to right, so that where words conflict with each other, the word furthest to the right takes precedence.

EXTENDED DESCRIPTION

Plus and minus signs may be used when modifying an existing label. They turn on or off the compartments and markings associated with the words.

A CMW label is represented in characters in the form:

{ ADMIN_LOW } [sensitivity label]

Items in curly brackets are optional. Leading and trailing white space is ignored. Items may be separated by blanks, tabs, commas, or slashes (/).

The system always displays labels in uppercase. Users may enter labels in any combination of uppercase and lowercase.

OPTIONS

-h: Set the label of the symbolic link.
-s: Set the sensitivity label of the CMW label.

RETURN VALUES

setlabel exits with one of the following values:

0: Successful completion.
1: Usage error.
2: Error in getting, setting or translating the label.

ATTRIBUTES

See attributes(5) for descriptions of the following attributes:

ATTRIBUTE TYPE	ATTRIBUTE VALUE
Availability	SUNWtsu

USAGE

On the command line, enclose the label in double quotes unless the label you are entering is only one word. Without quotes, a second word or letter separated by a space is interpreted as a second argument. Labels containing the characters [ and ] should be in quotes to suppress the shell's use of those characters in filename substitution.

% setlabel -s SECRET somefile
% setlabel "[SECRET]" somefile

Use any combination of upper and lowercase letters. You may separate items in a label with blanks, tabs, commas or slashes (/). Do not use any other punctuation.

% setlabel "[ts a b]" somefile
% setlabel "[ts,a,b]" somefile
% setlabel "[ts/a b]" somefile

When entering an SL with a command option that sets the SL, you do not need to use brackets around the SL.

% setlabel -s " TOP SECRET A B" somefile

EXAMPLES

Example 1 To set an SL

To set somefile's SL to SECRET A:

example% setlabel "[Secret a]" somefile

Example 2 To turn on or turn off a compartment

To turn on compartment B in somefile's SL:

example% setlabel -s +b somefile

To turn off compartment A in somefile's SL:

example% setlabel -s -- -A somefile

NOTES

If an incremental change is being made to an existing label and the first character of the label is a hyphen (-), a preceding double-hyphen (--) is required; the double-hyphen must follow any of the -s and -h options. (See the examples.)

Trusted Solaris 8 4/01 Reference Manual

setcmwlabel(2)

SunOS 5.8 Reference Manual

attributes(5)

Trusted Solaris 8 4/01 Last Revised 24 May 2001