Skip Navigation Links | |
Exit Print View | |
![]() |
Oracle Solaris Trusted Extensions Configuration and Administration Oracle Solaris 11 Express 11/10 |
Part I Initial Configuration of Trusted Extensions
1. Security Planning for Trusted Extensions
2. Configuration Roadmap for Trusted Extensions
3. Adding Trusted Extensions Software to the Oracle Solaris OS (Tasks)
4. Configuring Trusted Extensions (Tasks)
5. Configuring LDAP for Trusted Extensions (Tasks)
6. Configuring a Headless System With Trusted Extensions (Tasks)
Part II Administration of Trusted Extensions
7. Trusted Extensions Administration Concepts
8. Trusted Extensions Administration Tools
9. Getting Started as a Trusted Extensions Administrator (Tasks)
10. Security Requirements on a Trusted Extensions System (Overview)
11. Administering Security Requirements in Trusted Extensions (Tasks)
12. Users, Rights, and Roles in Trusted Extensions (Overview)
13. Managing Users, Rights, and Roles in Trusted Extensions (Tasks)
14. Remote Administration in Trusted Extensions (Tasks)
15. Trusted Extensions and LDAP (Overview)
16. Managing Zones in Trusted Extensions (Tasks)
17. Managing and Mounting Files in Trusted Extensions (Tasks)
18. Trusted Networking (Overview)
19. Managing Networks in Trusted Extensions (Tasks)
20. Multilevel Mail in Trusted Extensions (Overview)
21. Managing Labeled Printing (Tasks)
22. Devices in Trusted Extensions (Overview)
23. Managing Devices for Trusted Extensions (Tasks)
24. Trusted Extensions Auditing (Overview)
25. Software Management in Trusted Extensions (Reference)
Creating and Managing a Security Policy
Site Security Policy and Trusted Extensions
Computer Security Recommendations
Physical Security Recommendations
Personnel Security Recommendations
Additional Security References
B. Configuration Checklist for Trusted Extensions
Checklist for Configuring Trusted Extensions
C. Quick Reference to Trusted Extensions Administration
Administrative Interfaces in Trusted Extensions
Oracle Solaris Interfaces Extended by Trusted Extensions
Tighter Security Defaults in Trusted Extensions
Limited Options in Trusted Extensions
D. List of Trusted Extensions Man Pages
Trusted Extensions adds information to the following Oracle Solaris man pages.
Trusted Extensions Modification
Adds options to support allocating a device in a zone and cleaning the device in a windowed environment
Adds the window policy for labeled information
Adds X server audit classes
Adds audit events
Adds a label selector
Adds label authorizations
Adds the capability to mount, and therefore view, lower-level home directories
Adds label restrictions to a user's ability to cancel a print job
Adds options to support deallocating a device in a zone, cleaning the device in a windowed environment, and specifying the type of device to deallocate
Is invoked by default in Trusted Extensions
Recognizes the NET_MAC_AWARE and NET_MAC_AWARE_INHERIT process flags
Gets the mandatory access control status, SO_MAC_EXEMPT, of the socket
Gets the mandatory access control status, SO_MAC_EXEMPT, of the socket
Adds the all-zones interface
Adds a debug flag for labeled IKE processes
Adds the label_aware global parameter and three Phase 1 transform keywords, single_label, multi_label, and wire_label
Supports the negotiation of labeled security associations through multilevel UDP ports 500 and 4500 in the global zone
Adds the all-zones address property.
Adds three extensions: label, outer-label, and implicit-label
Determines whether the system is configured with Trusted Extensions
Adds Trusted Extensions network databases
Adds attributes, such as labels, that are associated with a device
Adds the -nolabels option
Adds label restrictions to the administrator's ability to administer printing
Adds label restrictions to the administrator's ability to move a print job
Adds label restrictions to the display of print queue information
Adds label restrictions to the caller's ability to remove print requests
Adds label restrictions to the administrator's ability to stop and restart the print service
Adds label restrictions to the display of the print service status
Adds the -R option to display extended security attributes
Adds labels to IPsec security associations (SAs)
Adds Trusted Extensions privileges, such as PRIV_FILE_DOWNGRADE_SL
Adds rights profiles, such as Object Label Management
Adds the -secattr option to add extended security attributes to a route
Sets the NET_MAC_AWARE per-process flag
Sets the SO_MAC_EXEMPT option
Sets the mandatory access control, SO_MAC_EXEMPT, on the socket
Adds options to support a role's label
Adds options to support a user's label and other security attributes, such as permitted idle time
Supports the SO_MAC_EXEMPT option for unlabeled peers
Adds including labels in tar files and extracting files according to label
Adds attribute types that are used in labeled tar files
Adds getting the label value on a user credential
Adds user security attributes that are specific to Trusted Extensions