Understanding Trusted Extensions

The installation and configuration of Trusted Extensions involves more than loading executable files, specifying your site's data, and setting configuration variables. Considerable background knowledge is required. Trusted Extensions software provides a labeled environment that is based on the following concepts:

• Capabilities that in most UNIX® environments are assigned to superuser are available to discrete administrative roles.

• In addition to UNIX permissions, access to data is controlled by special security tags. These tags are called labels. Labels are assigned to users, processes, and objects, such as data files and directories.

• The ability to override security policy can be assigned to specific users and applications.