Oracle Solaris Trusted Extensions Administrator's Procedures

Labeled Printer Output

Trusted Extensions prints security information on body pages and banner and trailer pages. The information comes from the label_encodings file and from the tsol_separator.ps file.

The security administrator can do the following to modify defaults that set labels and add handling instructions to printer output:

Localize or customize the text on the banner and trailer pages
Specify alternate labels to be printed on body pages or in the various fields of the banner and trailer pages
Change or omit any of the text or labels

The security administrator can also configure user accounts to use printers that do not print labels on the output. Users can also be authorized to selectively not print banners or labels on printer output.

Labeled Body Pages

By default, the “Protect As” classification is printed at the top and bottom of every body page. The “Protect As” classification is the dominant classification when the classification from the job's label is compared to the minimum protect as classification. The minimum protect as classification is defined in the label_encodings file.

For example, if the user is logged in to an Internal Use Only session, then the user's print jobs are at that label. If the minimum protect as classification in the label_encodings file is Public, then the Internal Use Only label is printed on the body pages.

Figure 15–1 Job's Label Printed at the Top and Bottom of a Body Page

Illustration shows a sample banner page with the label
printed at the top and bottom of the page.

Labeled Banner and Trailer Pages

The following figures show a default banner page and how the default trailer page differs. Callouts identify the various sections. Note that the trailer page uses a different outer line.

The text, labels, and warnings that appear on print jobs are configurable. The text can also be replaced with text in another language for localization.

Figure 15–2 Typical Banner Page of a Labeled Print Job

Illustration shows a banner page with job number, classifications,
and handling instructions.

Figure 15–3 Differences on a Trailer Page

Illustration shows that the trailer page reads JOB END,
while the banner page reads JOB START at the bottom of the page.

The following table shows aspects of trusted printing that the security administrator can change by modifying the /usr/lib/lp/postscript/tsol_separator.ps file.

Note –

To localize or internationalize the printed output, see the comments in the tsol_separator.ps file.

Table 15–1 Configurable Values in the tsol_separator.ps File


Output	Default Value	How Defined	To Change
`PRINTER BANNERS`	`/Caveats Job_Caveats`	`/Caveats Job_Caveats`	See Specifying Printer Banners in Oracle Solaris Trusted Extensions Label Administration.
`CHANNELS`	`/Channels Job_Channels`	`/Channels Job_Channels`	See Specifying Channels in Oracle Solaris Trusted Extensions Label Administration.
Label at the top of banner and trailer pages	`/HeadLabel Job_Protect def`	See `/PageLabel` description.	The same as changing `/PageLabel`.. Also see Specifying the Protect As Classification in Oracle Solaris Trusted Extensions Label Administration.
Label at the top and bottom of body pages	`/PageLabel Job_Protect def`	Compares the label of the job to the `minimum protect as classification` in the `label_encodings` file. Prints the more dominant classification. Contains compartments if the print job's label has compartments.	Change the `/PageLabel` definition to specify another value. Or, type a string of your choosing. Or, print nothing at all.
Text and label in the “Protect as” classification statement	`/Protect Job_Protect def` `/Protect_Text1 () def` `/Protect_Text2 () def`	See `/PageLabel` description. Text to appear above label. Text to appear below label.	The same as changing `/PageLabel`. Replace `()` in `Protect_Text1` and `Protect_Text2` with text string.