test

Oracle Solaris Trusted Extensions User's Guide

ProcedureCheck Messages and Select Session Type

If you do not restrict yourself to a single label, you can view data at different labels. The range in which you can operate is bounded at the upper end by the session clearance and at the lower end by the minimum label that your administrator assigned to you.

  1. In the Last Login dialog box, check that the time of your last session is accurate.

    Always check that nothing is suspicious about the last login, such as an unusual time of day. If you have reason to believe that the time is not accurate, contact your security administrator.

    Figure 2–1 Last Login Dialog Box

    Window shows date and time of the user's last login, Message of the Day, and session attributes. Shows a single-label session button.

  2. Check for any messages from the administrator.

    The Message of the Day field can contain warnings about scheduled maintenance or security problems. Always review the information in this field.

  3. Examine the security attributes of your session.

    As Figure 2–1 shows, the Last Login dialog box indicates any roles that you can assume, your minimum label, and other security characteristics.

  4. (Optional) If you are permitted to log in to a multilevel session, decide if you want a single-label session.

    Click the Restrict Session to a Single Label button to log in to a single-label session.

    You are presented with a label builder. If you are logging in at a single label, the label builder describes your session label. In a multilevel system, the label builder enables you to choose your session clearance.

  5. Confirm your label choice.

    Figure 2–2 Label Builder

    Label Builder dialog box shows Task identifier, selected clearance. Shows update field, and classification and compartments to create new clearance.

    • Accept the default, unless you have a reason not to.

    • For a multilevel session, select a clearance.

      • Deselect the current clearance, and click a classification and a sensitivity label.

      • Or, in the Clearance field, type a clearance.

      • Or, in the Update With field, type a label.

    • For a single-level session, select a label.

      • Deselect the current label, and click a different classification.

      • Or, in the Update With field, type a label.

  6. Click OK.

    The trusted desktop that you chose, either Trusted CDE or Trusted JDS, appears.