Solaris Trusted Extensions Administrator's Procedures

This system administration enhancement is new in the Developer 1/08 release.

Starting with this release, the Solaris Trusted Extensions packages are installed when the Solaris OS is installed. The ExtraValue directory is no longer present. This directory previously included the Solaris Trusted Extensions packages. The Solaris Trusted Extensions functionality is managed by the service management facility (SMF) as the svc:/system/labeld:default service. This service must be enabled. After the service is in the online state, reboot the system to activate Solaris Trusted Extensions. Additional configuration is required after the reboot. For more information, see Part I, Initial Configuration of Trusted Extensions, in Solaris Trusted Extensions Administrator’s Procedures.

The Developer 1/08 release also includes the following features:

• The domain of interpretation (DOI) is configurable. For more information, see Network Security Attributes in Trusted Extensions in Solaris Trusted Extensions Administrator’s Procedures.

• The NFSv3 protocol supports multilevel mounts. For more information, see Trusted Extensions Software and NFS Protocol Versions in Solaris Trusted Extensions Administrator’s Procedures.

• The name service cache daemon (nscd) can be separately configured per labeled zone. This configuration supports environments where each zone is connected to a subnetwork that runs at the label of the zone, and the subnetwork has its own name server for that label.

For more information about Solaris Trusted Extensions, see Solaris Trusted Extensions Administrator’s Procedures.