Security Features

The following security features and enhancements have been added to the Solaris 10 11/06 release.

Solaris Trusted Extensions

The Solaris Trusted Extensions software provides multilevel security for the Solaris OS, including mandatory access control for the following:

• Files

• File systems

• Processes

• Removable devices

• Networking

• Desktop environments

• Printing

The Solaris Trusted Extensions software also provides tools for the following actions:

• Defining policies

• Setting up sensitivity labels

• Performing trusted system management

The Solaris Trusted Extensions feature enables you to define your data access policies to control information in a flexible but highly secure manner. Solaris Trusted Extensions can be used as a configuration option for the Solaris OS.

For more information about Solaris Trusted Extensions, see the README file in the Solaris_10/ExtraValue/CoBundled/Trusted_Extensions directory. See also, http://www.sun.com/smi/Press/sunflash/2006-02/sunflash.20060214.3.xml.

Solaris Trusted Extensions for Printing

The Solaris Trusted Extensions for printing feature enables the following features:

• Restricted output to printers by label ranges

• Specially labeled banner and trailer pages

• Specially labeled headers and footers

Solaris Trusted Extensions File-System Labeling

Starting with this release, files and directories are labeled by the zone or host that exports them. The mount policy is restricted to prevent writing down.