Oracle Solaris Trusted Extensions Label Administration


A

	access control
		by label range ( )
		example ( )

	access decisions, using labels ( )

	access-related words, defined ( )

	accounts
		label range example ( )
		label range overview ( )
		session range ( )

	`ACCREDITATION RANGE` keyword ( )

	`ACCREDITATION RANGE` section
		described ( )
		example ( )

	accreditation ranges
		overview ( )
		system ( )
		user ( )

	`ADMIN_HIGH` label
		classification value ( )
		illustrating numerical value ( )

	`ADMIN_LOW` label
		classification value ( )
		illustrating numerical value ( )

	administrative labels
		configuring appearance ( )
		in system accreditation range ( )
		specifying name visibility ( )

	`aname=` classification keyword ( )

	areas of interest, represented by compartment ( )

	authorizations
		Downgrade File Label ( )
		Print PostScript File ( )
		Print Without Labels ( )
		Upgrade File Label ( )


B

	banner pages
		appearance ( )
		computing the classification ( )
		customizing ( )
		internationalizing ( )
		labeling ( ) ( )

	body pages
		appearance ( )
		labels ( )


C

	caveats, See handling instructions

	channels
		prefixes and suffixes ( )
		strings on banner and trailer pages ( ) ( )
		worksheet example ( )

	`CHANNELS` keyword ( )

	`CHANNELS` section
		described ( )
		example ( )

	CIPSO labels
		illustration of ( )
		numerical values ( )
		troubleshooting ( )
		warning in `label_encodings` file ( )

	classifications
		changing column header in label builder ( )
		dominance ( )
		example of analyzing ( )
		keywords ( )
		maximum number ( ) ( )
		numerical values ( )
		planning example ( )
		rules for printing ( )
		specifying colors ( )
		syntax ( )

	`CLASSIFICATIONS` section
		described ( )
		example ( )

	clearances
		account label range ( )
		type of label ( )
		worksheet example ( )

	`CLEARANCES` keyword ( )

	`CLEARANCES` section
		described ( )
		example ( )

	`COLOR NAMES` section
		color planner ( )
		describing ( ) ( )
		example ( )

	colors
		assigning ( )
		finding color values ( )
		rules of use for labels ( )
		specifying for labels ( )
		values ( )
		worksheet example ( )

	column headers, changing in label builder ( )

	combination constraints
		defined ( )
		example ( ) ( ) ( ) ( )

	`COMBINATION CONSTRAINTS` keyword ( )

	combination rules, See combination constraints

	Common IP Security Option (CIPSO), See CIPSO labels

	comparing
		GFI files ( )
		`label_encodings` files ( )
		labels ( )

	compartments
		changing column header in label builder ( )
		default and inverse words ( )
		example of words ( )
		numerical values ( )
		planning example ( )
		setting up hierarchies ( )
		words ( )
		worksheet example ( )

	`CONFIDENTIAL: INTERNAL_USE_ONLY` label, requirements ( )

	`CONFIDENTIAL: NEED_TO_KNOW` label
		groups that use ( )
		requirements ( )

	`CONFIDENTIAL: REGISTERED` label
		adding DAC protections ( )
		requirements ( )

	Configuring Security Text on Print Jobs (Task Map) ( )

	customizing
		banner pages ( )
		color assignments ( )
		color assignments to labels ( )
		handling instructions on printer output ( )
		label appearance ( )
		security text on printer output ( )


D

	debugging, `label_encodings` file ( )

	default words, defined ( )

	Defense Intelligence Agency (DIA), `label_encodings` reference ( )

	demonstration files
		`label_encodings.example` file ( )
		`label_encodings.multi` file ( )
		`label_encodings` samples ( )

	dominance ( )

	Downgrade File Label authorization ( )


E

	encodings file, See `label_encodings` file

	`/etc/security/tsol` directory ( )

	examples
		`ACCREDITATION RANGE` section ( )
		`CHANNELS` section ( )
		`CLASSIFICATIONS` section ( )
		`CLEARANCES` section ( )
		`COLOR NAMES` section ( )
		column headers in label builder ( )
		`label_encodings` file ( )
		labels planning ( )
		`LOCAL DEFINITIONS` section ( )
		MAC decision ( )
		`PRINTER BANNERS` section ( )
		`SENSITIVITY LABELS` section ( )


F

	files
		`label_encodings.example` ( )
		`label_encodings.simple` ( )
		`label_encodings` versions ( )
		`/usr/lib/lp/postscript/tsol_separator.ps` ( )
		`/usr/openwin/lib/rgb.txt` ( )


G

	GFI files
		comparing ( )
		in `/etc/security/tsol` directory ( )


H

	handling instructions
		printer banners ( )
		specifying ( )


I

	`INFORMATION LABELS` keyword ( )

	`INFORMATION LABELS` section
		described ( )
		example ( )

	initial compartments
		assigning bits to words ( )
		defined ( )
		sample of assigning ( )

	`initial compartments=` classification keyword ( )

	internationalizing
		banner and trailer pages ( )
		printer banner and trailer pages ( )

	inverse words, defined ( )


K

	keywords for classifications ( )


L

	label builder, changing column headers ( )

	`label_encodings.example` file ( ) ( )

	`label_encodings.gfi.multi` file ( )

	`label_encodings.gfi.single` file ( )

	`label_encodings.multi` file ( )

	`label_encodings.simple` file ( ) ( )

	`label_encodings.single` file ( )

	`label_encodings` file
		access-related words ( )
		`CHANNELS` section ( ) ( )
		classification keywords ( )
		classification name syntax ( )
		classifications example ( )
		color encoding example ( )
		commercial example ( )
		default versions ( )
		describing ( )
		example ( )
		example of creating ( )
		list of ( )
		`LOCAL DEFINITIONS` section ( )
		planning ( )
		protect as classification ( )
		specifying label colors ( ) ( )
		Sun extensions to GFI encodings ( )
		supplied versions ( )
		syntax ( )
		U.S. government multilabel version ( )
		U.S. government single-label version ( )
		U.S. government versions ( )
		word order requirements ( )

	label limit, clearance ( )

	label ranges, overview ( )

	label translation ( )

	labels
		access decisions ( )
		account label range ( )
		accreditation ranges ( )
		arranging relationships ( )
		authorizations for changing ( )
		available during sessions ( )
		banner and trailer pages ( )
		CIPSO ( ) ( )
		color planning example ( )
		commercial example ( )
		comparing ( )
		components ( )
		configuring on printer output ( )
		dominance ( )
		example of analyzing ( )
		files supplied by Sun ( )
		installation example ( )
		internal representation ( )
		length of components ( )
		mandatory access and printing considerations ( )
		minimum protect as classification ( )
		overview of planning ( )
		planning ( )
		printed body pages ( )
		ranges ( )
		requirements for `CONFIDENTIAL: INTERNAL_USE_ONLY` ( )
		requirements for `CONFIDENTIAL: NEED_TO_KNOW` ( )
		requirements for `CONFIDENTIAL: REGISTERED` ( )
		restricting access by ( ) ( )
		session range ( )
		sources for `label_encodings` files ( )
		specifying colors ( )
		strategizing ( )
		system accreditation range ( )
		textual strings ( )
		translating ( )
		types ( )
		user accreditation range ( )
		valid ( )
		visible in workspaces ( )
		well-formed ( )
		worksheet example ( )

	`LOCAL DEFINITIONS` keyword ( )

	`LOCAL DEFINITIONS` section
		adding to GFI encodings file ( )
		described ( ) ( )
		example ( )


M

	Managing Label Encodings (Task Map) ( )

	mandatory access control (MAC)
		defined ( )
		used in access decisions ( )

	minimum clearance, example ( )

	minimum labels
		account label range ( )
		commercial example ( )

	minimum protect as classification
		example ( ) ( )
		printed output ( )

	minimum sensitivity label
		defined ( )
		example ( ) ( ) ( )

	Modifying Sun Extensions (Task Map) ( )


N

	`name=` classification keyword ( )


P

	planners, See worksheets

	planning labels
		colors ( )
		commercial example ( )
		`label_encodings` file ( )
		mechanics ( )
		overview ( )
		strategizing ( )
		supporting procedures ( )
		unlabeled printer output ( )

	Planning Labels (Task Map) ( )

	prefixes, in channels ( )

	Print PostScript File authorization ( )

	Print Without Labels authorization ( )

	printer banners
		appearance ( )
		worksheet example ( )

	`PRINTER BANNERS` keyword ( )

	`PRINTER BANNERS` section
		described ( )
		example ( )

	printer output
		banner text ( )
		changing printed labels ( )
		channels ( )
		configuring labels and text ( )
		planning example ( )
		prefixes and suffixes ( )
		rules for handling ( )
		setting minimum protect as classification ( )

	printing, See printer output

	privileges, changing labels ( )

	protect as classification
		example ( ) ( )
		overview ( )


R

	required combinations, See combination constraints

	`REQUIRED COMBINATIONS` keyword ( )

	`rgb.txt` file ( )


S

	security policy
		defined ( )
		identifying site requirements ( )
		protecting information ( )
		setting minimum protect as ( )
		site-specific ( )

	sensitivity, type of label ( )

	sensitivity labels, See labels

	`SENSITIVITY LABELS` keyword ( )

	`SENSITIVITY LABELS` section
		described ( )
		example ( )

	sessions
		duration of label restrictions chosen at login ( )
		session range definition ( )

	`sname=` classification keyword ( )

	strict dominance ( )

	suffixes, in channels ( )

	Sun extensions, See `LOCAL DEFINITIONS` section

	syntax of `label_encodings` file ( )

	`sys_trans_label` privilege ( )

	system accreditation range ( )

	system security policy ( )


T

	task maps
		Configuring Security Text on Print Jobs (Task Map) ( )
		Managing Label Encodings (Task Map) ( )
		Modifying Sun Extensions (Task Map) ( )
		Planning Labels (Task Map) ( )

	trailer pages
		computing the classification ( )
		example ( )
		internationalizing ( )
		labeling ( ) ( )

	translating
		See also internationalizing
		between label representations ( )

	troubleshooting, `label_encodings` file ( )

	`tsol_separator.ps` file ( )

	types of labels ( )


U

	Upgrade File Label authorization ( )

	user accreditation range ( )

	users
		authorizations for changing labels ( )
		printing authorizations ( )
		workspace access ( )

	`/usr/lib/lp/postscript/tsol_separator.ps` file ( )

	`/usr/openwin/lib/rgb.txt` file ( )


V

	`value=` classification keyword ( )

	values
		of administrative classifications ( )
		of classifications ( )
		of compartments ( )

	`VERSION=` keyword ( )

	`VERSION` section
		described ( )
		example ( )


W

	word order requirements, `label_encodings` file ( )

	words, planning example ( )

	`WORDS` keyword ( )

	work groups, represented by label compartments ( )

	worksheets
		channels planner ( )
		classifications planner ( )
		clearances planner ( )
		color planner ( )
		compartments planner ( )
		printer banners planner ( )

	workspaces
		access by users ( ) ( )
		labeled ( )