NAME | SYNOPSIS | DESCRIPTION | RETURN VALUES | FILES | ATTRIBUTES | SEE ALSO | NOTES | BUGS
#include <tsol/label.h> typedef label_set_identifier { int type; char *name; } set_id;int blinset(const bslabel_t *label,const set_id *id));
The calling process must have PRIV_SYS_TRANS_LABEL
in its set of effective privileges to perform tests on labels that dominate the current processes' sensitivity label.
label is examined to determine if it is an element of the label set id. The set_id type field contains a manifest constant defining the type of set to be examined. The set_id name field contains the name of the particular set of type type. The following types and names are defined:
SYSTEM_ACCREDITATION_RANGE
The system's accreditation range as defined in the label_encodings file. The name field is ignored and need not be specified.
USER_ACCREDITATION_RANGE
The user accreditation range as defined in the label_encodings file. The name field is ignored and need not be specified.
Other type and name values are reserved for future implementation.
blinset() returns:
If the label is contained in the specified set.
If the label is not in the specified set, is not a valid sensitivity label, or is not dominated by the process sensitivity label and the process does not have PRIV_SYS_TRANS_LABEL
in its set
of effective privileges.
If the specified set is inaccessible.
The label encodings file contains the classification names, words, constraints, and values for the defined labels of this system.
See attributes(5) for descriptions of the following attributes:
ATTRIBUTE TYPE | ATTRIBUTE VALUE |
---|---|
Availability | SUNWtsu |
MT-Level | MT-Safe |
bcltobanner(3TSOL), blcompare(3TSOL), bltype(3TSOL), labelinfo(3TSOL), sbltos(3TSOL), label_encodings(4)
Trusted Solaris Developer's Guide and the Trusted Solaris administrator's document set
The ADMIN_HIGH
and ADMIN_LOW
labels are accepted even if the remainder of the system's accreditation range is inaccessible.
The only sets available are the System Accreditation Range and User Accreditation Range.
NAME | SYNOPSIS | DESCRIPTION | RETURN VALUES | FILES | ATTRIBUTES | SEE ALSO | NOTES | BUGS