Trusted Extensions Configuration and Administration

Exit Print View

Updated: July 2014
 
 

Security Attributes That Must Be Assigned to Users

The security administrator can modify the security attributes for new users. For information about the files that contain the default values, see Default User Security Attributes in Trusted Extensions. The following table shows the security attributes that can be assigned to users and the effect of each assignment.

Table 10-2  Security Attributes That Are Assigned After User Creation
User Attribute
Location of Default Value
Is Action Required
Effect of Assignment
Password
None
Required
User has password
Roles
None
Optional
User can assume a role
Authorizations
policy.conf file
Optional
User has additional authorizations
Rights Profiles
policy.conf file
Optional
User has additional rights profiles
Labels
label_encodings file
Optional
User has different default label or accreditation range
Privileges
policy.conf file
Optional
User has different set of privileges
Account Usage
policy.conf file
Optional
User has different setting for computer when it is idle
Audit
Kernel
Optional
User is audited differently from the system defaults