Go to main content
Index
A
- access See
computer access- remote systemsRemote Administration in Trusted Extensions
- access policy
- Discretionary Access Control (DAC)
- Differences Between Trusted Extensions and the Oracle Solaris OS
- Trusted Extensions and the Oracle Solaris OS
- Mandatory Access Control (MAC)Differences Between Trusted Extensions and the Oracle Solaris OS
- accessing
- home directoriesZones in Trusted Extensions
- labeled zones by usersHow to Enable Users to Log In to a Labeled
Zone
- printersLabels, Printers, and Printing
- remote desktopHow to Configure a Trusted Extensions System With Xvnc for Remote Access
- ZFS dataset mounted in lower-level zone from higher-level zoneSharing and Mounting a ZFS Dataset From Labeled Zones
- account locking
- preventing for users who can assume rolesHow to Prevent Account Locking
for Users
- account-policy SMF stencil
- How to Modify policy.conf Defaults
- Customizing the User Environment for Security
- Security Attributes That Must Be Assigned to Users
- policy.conf File Defaults in Trusted Extensions
- How to Change Security Defaults in System
Files
- Applications That Are Restricted to a Labeled Zone
- accounts
- See Alsoroles
- See Alsousers
- creatingCreating Roles and Users in Trusted Extensions
- planningPlanning User Security in Trusted Extensions
- accreditation checksTrusted Extensions Accreditation Checks
- accreditation ranges
- label_encodings fileLabel Encodings File
- adding
- IPsec protectionsHow to Apply IPsec Protections in
a Multilevel Trusted Extensions Network
- LDAP role with roleaddCreating the Security Administrator Role in LDAP
- local role with roleaddHow to Create the Security Administrator
Role in Trusted Extensions
- local user with useraddUsing the useradd Command to Create a Local User
- multilevel datasetHow to Create and Share a Multilevel Dataset
- network databases to LDAP serverPopulate the LDAP Server With Trusted Extensions Data
- nscd daemon to every labeled zoneHow to Configure a Separate Name Service for
Each Labeled Zone
- remote host templatesCreating Security Templates
- remote hostsHow to Connect a Trusted Extensions System to Other Trusted Extensions Systems
- rolesCreating Roles and Users in Trusted Extensions
- secondary zonesHow to Create a Secondary Labeled Zone
- shared network interfacesHow to Share a Single IP Address With All Zones
- Trusted Extensions packagesAdd Trusted Extensions Packages to an Oracle Solaris System
- users who can assume rolesHow to Create Users Who Can Assume Roles in Trusted Extensions
- VNIC interfacesHow to Add a Virtual Network Interface to a
Labeled Zone
- zone-specific nscd daemonHow to Configure a Separate Name Service for
Each Labeled Zone
- Additional Trusted Extensions Configuration TasksAdditional Trusted Extensions Configuration Tasks
- ADMIN_HIGH label
- body page labels andHow to Configure a Zone as a Single-Level
Print Server
- global zone processes and zonesGlobal Zone Processes and Labeled
Zones
- mlslabel andmlslabel Property
and Mounting Single-Level File Systems
- multilevel datasets andNo Privilege Overrides for MAC Read-Write
Policy
- NFS-mounted files in global zoneTrusted Extensions Policy for Single-Level
Datasets
- no localizationFor International Customers of Trusted Extensions
- role clearanceHow to Create a System Administrator
Role
- roles andRole Creation in Trusted Extensions
- top administrative labelAdministrative Labels
- ADMIN_LOW label
- limitations on unlabeled system mountsSharing and Mounting Files
in the Global Zone
- lowest labelAdministrative Labels
- mounting files andSharing and Mounting Files
in the Global Zone
- administering
- account lockingHow to Prevent Account Locking
for Users
- auditing in Trusted ExtensionsAuditing in Trusted Extensions
- changing label of informationHow to Enable a User to Change the Security
Level of Data
- convenient authorizations for usersHow to Create a Rights Profile for Convenient Authorizations
- file systems
- mountingHow to NFS Mount Files in a Labeled Zone
- overviewTrusted Extensions Policies for Mounted File
Systems
- troubleshootingHow to Troubleshoot Mount Failures in Trusted Extensions
- files
- backing up with labelsHow to Back Up Files in Trusted Extensions
- restoring with labelsHow to Restore Files in Trusted Extensions
- labeled IPsecConfiguring Labeled IPsec
- labeled printingManaging Labeled Printing
- LDAPConfiguring LDAP for Trusted Extensions
- mailAbout Multilevel Mail in Trusted Extensions
- multilevel datasetsResults of Sharing and Mounting File Systems in Trusted Extensions
- multilevel portsDisplaying Multilevel Ports on a System
- printingManaging Printing in Trusted Extensions
- quick reference for administratorsQuick Reference to Trusted Extensions Administration
- remote host templatesCreating Security Templates
- remotelyRemote Administration in Trusted Extensions
- routes with security attributesHow to Add Default Routes
- security templates
- How to Add a Range of Hosts to a Security
Template
- How to Add a Host to a Security Template
- sharing file systemsHow to Share File Systems From a Labeled Zone
- startup files for usersHow to Configure Startup Files for Users in Trusted Extensions
- system filesHow to Change Security Defaults in System
Files
- third-party softwareSoftware Management in Trusted Extensions
- trusted networkManaging Networks in Trusted Extensions
- unlabeled printingReducing Printing Restrictions in Trusted Extensions
- user privilegesHow to Restrict a User's Set of
Privileges
- users
- Managing Users and Rights
- Managing Users, Rights,
and Roles in Trusted Extensions
- Decisions to Make Before Creating
Users in Trusted Extensions
- zonesManaging Zones
- zones by using txzonemgrZone Administration Utilities in Trusted Extensions
- administrative labelsAdministrative Labels
- administrative roles Seeroles
- administrative tools
- commandsCommand Line Tools in Trusted Extensions
- configuration filesConfiguration Files in Trusted Extensions
- descriptionTrusted Extensions Administration Tools
- Labeled Zone Managertxzonemgr Script
- txzonemgr scripttxzonemgr Script
- all-zones address
- Oracle Solaris Man Pages That Are Modified by Trusted Extensions
- How to Configure a Multilevel Print Server
and Its Printers
- Network Commands in Trusted Extensions
- Zones and IP Addresses in Trusted Extensions
- Configuring the Network Interfaces in Trusted Extensions Task Map
- Access to Labeled Zones
- Allocate Device authorizationHow to Create a Rights Profile for Convenient Authorizations
- application security labelLabels for IPsec-Protected Exchanges
- applications
- enabling initial network contact between client and serverMaking the Host Address 0.0.0.0/32 a Valid Initial Address
- evaluating for securitySecurity Administrator Responsibilities for
Trusted Programs
- trusted and trustworthyEvaluating Software for Security
- ARMOR roles
- Creating Roles and Users in Trusted Extensions Task Map
- Secure System Hardware and Make Security Decisions Before Enabling Trusted Extensions
- assigning
- privileges to usersSecurity Attribute Assignment to Users in Trusted Extensions
- rights profilesSecurity Attribute Assignment to Users in Trusted Extensions
- atohexlabel commandHow to Obtain the Hexadecimal Equivalent
for a Label
- auditing in Trusted Extensions
- differences from Oracle Solaris auditingTrusted Extensions and Auditing
- planningPlanning for Auditing in Trusted Extensions
- referenceTrusted Extensions and Auditing
- roles for administeringAuditing in Trusted Extensions
- authorizations
- assigningSecurity Attribute Assignment to Users in Trusted Extensions
- authorizing a user or role to change labelHow to Enable a User to Change the Security
Level of Data
- convenient for usersHow to Create a Rights Profile for Convenient Authorizations
- grantedTrusted Extensions and Access Control
- authorizing
- unlabeled printingReducing Printing Restrictions in Trusted Extensions
B
- backing up
- previous system before installationBacking Up the System Before Enabling Trusted Extensions
- banner pages
- description of labeledLabeled Banner and Trailer Pages
- difference from trailer pageDifferences on a Trailer Page
- removing labelsHow to Enable Specific Users and Roles to
Bypass Labeling Printed Output
- typicalTypical Banner Page of a Labeled Print
Job
- body pages
- ADMIN_HIGH label onHow to Configure a Zone as a Single-Level
Print Server
- description of labeledLabeled Body Pages
- unlabeledHow to Enable Specific Users and Roles to
Bypass Labeling Printed Output
C
- .copy_files file
- setting up for usersCustomizing Startup Files for Users
- .copy_files file
- setting up for usersHow to Configure Startup Files for Users in Trusted Extensions
- .copy_files file
- description.copy_files and .link_files Files
- changing
- IDLETIME keywordChanging the System's Idle Settings
- labels by authorized usersHow to Enable a User to Change the Security
Level of Data
- security level of dataHow to Enable a User to Change the Security
Level of Data
- system security defaultsHow to Change Security Defaults in System
Files
- user privilegesHow to Restrict a User's Set of
Privileges
- checking
- label_encodings fileHow to Check and Install Your Label Encodings
File
- roles are workingHow to Verify That the Trusted Extensions Roles
Work
- checklists for initial setup teamChecklist for Configuring Trusted Extensions
- chk_encodings commandChecking label_encodings Syntax on the Command
Line
- choosing Seeselecting
- classification label componentDominance Relationships Between Labels
- clearances
- label overviewLabels in Trusted Extensions Software
- commands
- troubleshooting networkingHow to Debug the Trusted Extensions Network
- commercial applications
- evaluatingSecurity Administrator Responsibilities for
Trusted Programs
- Common Tasks in Trusted Extensions (Task Map)Performing Common Tasks in Trusted Extensions
- compartment label componentDominance Relationships Between Labels
- component definitions
- label_encodings fileLabel Encodings File
- configuring
- access to remote Trusted ExtensionsRemote Administration in Trusted Extensions
- by assuming a limited role or as rootSecure System Hardware and Make Security Decisions Before Enabling Trusted Extensions
- labeled printingConfiguring Labeled Printing
- LDAP for Trusted ExtensionsConfiguring LDAP on a Trusted Extensions System
- LDAP proxy server for Trusted Extensions clientsConfiguring a Trusted Extensions LDAP Proxy Server
- network interfaces
- How to Connect a Trusted Extensions System to Other Trusted Extensions Systems
- How to Share a Single IP Address With All Zones
- routes with security attributesHow to Add Default Routes
- startup files for usersHow to Configure Startup Files for Users in Trusted Extensions
- Trusted ExtensionsConfiguring Trusted Extensions
- Trusted Extensions labeled zonesCreating Labeled Zones
- trusted networkManaging Networks in Trusted Extensions
- VNICsHow to Add a Virtual Network Interface to a
Labeled Zone
- Configuring Labeled IPsec (Task Map)Configuring Labeled IPsec
- Configuring Labeled Printing (Task Map)Configuring Labeled Printing
- configuring Trusted Extensions
- checklist for initial setup teamChecklist for Configuring Trusted Extensions
- initial proceduresConfiguring Trusted Extensions
- kernel zonesCreating Labeled Zones
- labeled zonesCreating Labeled Zones
- remote accessRemote Administration in Trusted Extensions
- task mapsConfiguration Roadmap for Trusted Extensions
- controlling Seerestricting
- creating
- accountsCreating Roles and Users in Trusted Extensions
- accounts during or after configurationSecure System Hardware and Make Security Decisions Before Enabling Trusted Extensions
- home directories
- Home Directory Creation in Trusted Extensions
- Creating Centralized Home Directories
in Trusted Extensions
- home directory serverHow to Create the Home Directory Server
in Trusted Extensions
- kernel zonesCreating Labeled Zones
- labeled zonesCreating Labeled Zones
- LDAP clientMake the Global Zone an LDAP Client in Trusted Extensions
- LDAP proxy server for Trusted Extensions clientsConfiguring a Trusted Extensions LDAP Proxy Server
- LDAP role with roleaddCreating the Security Administrator Role in LDAP
- local role with roleaddHow to Create the Security Administrator
Role in Trusted Extensions
- local user with useraddUsing the useradd Command to Create a Local User
- rolesCreating Roles and Users in Trusted Extensions
- users who can assume rolesHow to Create Users Who Can Assume Roles in Trusted Extensions
- zonesCreating Labeled Zones
- Creating Labeled ZonesCreating Labeled Zones
- customizing
- label_encodings fileLabel Encodings File
- unlabeled printingReducing Printing Restrictions in Trusted Extensions
- user accountsCustomizing the User Environment for Security
- Customizing User Environment for Security (Task Map)Customizing the User Environment for Security
- cut and paste
- and labelsRules When Changing the Level of Security for Data
D
- /dev/kmem kernel image file
- security violationEvaluating Software for Security
- DAC Seediscretionary access control (DAC)
- data
- relabeling efficientlyHow to Create and Share a Multilevel Dataset
- database schema
- LDAP and Trusted Extensions, forTrusted Extensions Database Schema for LDAP
- databases
- in LDAP from Trusted ExtensionsUsing the LDAP Naming Service in Trusted Extensions
- trusted networkNetwork Configuration Databases in Trusted Extensions
- datasets SeeZFS
- debugging Seetroubleshooting
- deciding
- to configure by assuming a limited role or as rootSecure System Hardware and Make Security Decisions Before Enabling Trusted Extensions
- to use an Oracle-supplied encodings fileSecure System Hardware and Make Security Decisions Before Enabling Trusted Extensions
- decisions to make
- based on site security policySite Security Policy for Trusted Extensions
- before enabling Trusted ExtensionsSecure System Hardware and Make Security Decisions Before Enabling Trusted Extensions
- deleting
- labeled zonesHow to Remove Trusted Extensions From the System
- developer responsibilitiesDeveloper Responsibilities When Creating Trusted
Programs
- differences
- administrative interfaces in Trusted ExtensionsAdministrative Interfaces in Trusted Extensions
- between Trusted Extensions and Oracle Solaris auditingTrusted Extensions and Auditing
- between Trusted Extensions and Oracle Solaris OSDifferences Between Trusted Extensions and the Oracle Solaris OS
- defaults in Trusted ExtensionsTighter Security Defaults in Trusted Extensions
- extending Oracle Solaris interfacesOracle Solaris Interfaces Extended by Trusted Extensions
- limited options in Trusted ExtensionsLimited Options in Trusted Extensions
- directories
- accessing lower-levelZones in Trusted Extensions
- authorizing a user or role to change label ofHow to Enable a User to Change the Security
Level of Data
- for naming service setupPopulate the LDAP Server With Trusted Extensions Data
- mountingHow to Share File Systems From a Labeled Zone
- sharingHow to Share File Systems From a Labeled Zone
- disabling
- Trusted ExtensionsHow to Remove Trusted Extensions From the System
- discretionary access control (DAC)Trusted Extensions and Access Control
- displaying
- labels of file systems in labeled zoneDisplaying the Labels of File Systems in the restricted Zone
- status of every zoneHow to Display Ready or Running Zones
- DOI
- remote host templatesNetwork Security Attributes in Trusted Extensions
- domain of interpretation (DOI)
- modifyingHow to Configure a Different Domain of Interpretation
- dominance of labelsDominance Relationships Between Labels
- Downgrade File Label authorizationHow to Create a Rights Profile for Convenient Authorizations
E
- /etc/default/kbd file
- how to editHow to Change Security Defaults in System
Files
- /etc/default/login file
- how to editHow to Change Security Defaults in System
Files
- /etc/default/passwd file
- how to editHow to Change Security Defaults in System
Files
- /etc/hosts fileHow to Add Hosts to the System's
Known Network
- /etc/security/policy.conf file
- modifyingHow to Modify policy.conf Defaults
- /etc/security/policy.conf file
- defaultspolicy.conf File Defaults in Trusted Extensions
- how to editHow to Change Security Defaults in System
Files
- /etc/security/tsol/label_encodings fileLabel Encodings File
- /etc/system file
- modifying for IPv6 CIPSO networkHow to Configure an IPv6 CIPSO Network in Trusted Extensions
- editing system filesHow to Change Security Defaults in System
Files
- enabling
- DOI different from 1How to Configure a Different Domain of Interpretation
- IPv6 CIPSO networkHow to Configure an IPv6 CIPSO Network in Trusted Extensions
- keyboard shutdownHow to Change Security Defaults in System
Files
- labeld serviceInstalling and Enabling Trusted Extensions
- login to labeled zoneHow to Enable Users to Log In to a Labeled
Zone
- Trusted Extensions featureInstalling and Enabling Trusted Extensions
- enabling Trusted Extensions
- /usr/sbin/labeladmTrusted Extensions Administrative
Tools
- encodings file Seelabel_encodings file
- evaluating programs for securityEvaluating Software for Security
- exporting Seesharing
F
- fallback mechanism
- in security templatesTrusted Network Fallback Mechanism
- file systems
- mounting in global and labeled zonesResults of Sharing and Mounting File Systems in Trusted Extensions
- NFS mountsResults of Sharing and Mounting File Systems in Trusted Extensions
- sharingTrusted Extensions Policies for Mounted File
Systems
- sharing in global and labeled zonesResults of Sharing and Mounting File Systems in Trusted Extensions
- files
- .copy_files
- How to Configure Startup Files for Users in Trusted Extensions
- .copy_files and .link_files Files
- .link_files
- How to Configure Startup Files for Users in Trusted Extensions
- .copy_files and .link_files Files
- /etc/default/kbdHow to Change Security Defaults in System
Files
- /etc/default/loginHow to Change Security Defaults in System
Files
- /etc/default/passwdHow to Change Security Defaults in System
Files
- /etc/security/policy.conf
- How to Modify policy.conf Defaults
- policy.conf File Defaults in Trusted Extensions
- /etc/security/tsol/label_encodings fileLabel Encodings File
- /usr/lib/cups/filter/tsol_separator.psLabeled Printer Output
- /usr/sbin/txzonemgr
- Zone Administration Utilities in Trusted Extensions
- Trusted Extensions Administrative
Tools
- accessing from dominating labelsHow to Display the Labels of Mounted
Files
- authorizing a user or role to change label ofHow to Enable a User to Change the Security
Level of Data
- backing up with labelsHow to Back Up Files in Trusted Extensions
- getmountsHow to Display the Labels of Mounted
Files
- loopback mountingHow to Loopback Mount a File That
Is Usually Not Visible in a Labeled Zone
- policy.confHow to Change Security Defaults in System
Files
- preventing access from dominating labelsHow to Disable the Mounting of Lower-Level
Files
- relabeling privilegesHow to Enable Files to Be Relabeled From a
Labeled Zone
- restoring with labelsHow to Restore Files in Trusted Extensions
- startupHow to Configure Startup Files for Users in Trusted Extensions
- files and file systems
- mountingHow to Share File Systems From a Labeled Zone
- namingHow to Share File Systems From a Labeled Zone
- sharingHow to Share File Systems From a Labeled Zone
- finding
- label equivalent in hexadecimalHow to Obtain the Hexadecimal Equivalent
for a Label
- label equivalent in text formatHow to Obtain a Readable Label
From Its Hexadecimal Form
G
- gateways
- accreditation checksGateway Accreditation Checks
- example ofGateways in Trusted Extensions
- gdm
- accessing multilevel remotelyHow to Configure a Trusted Extensions System With Xvnc for Remote Access
- getmounts scriptHow to Display the Labels of Mounted
Files
- global zone
- difference from labeled zonesZones in Trusted Extensions
H
- hardware planningPlanning System Hardware and Capacity for Trusted Extensions
- hextoalabel commandHow to Obtain a Readable Label
From Its Hexadecimal Form
- home directories
- accessingZones in Trusted Extensions
- creating
- Home Directory Creation in Trusted Extensions
- Creating Centralized Home Directories
in Trusted Extensions
- creating server forHow to Create the Home Directory Server
in Trusted Extensions
- logging in and getting
- How to Enable Users to Access Their
Remote Home Directories by Configuring the Automounter on Each Server
- How to Enable Users to Access Their
Remote Home Directories at Every Label by Logging In to Each NFS Server
- host types
- networking
- Host Type and Template Name in Security Templates
- Trusted Extensions Data Packets
- remote host templatesNetwork Security Attributes in Trusted Extensions
- table of templates and protocolsHost Type and Template Name in Security Templates
- hosts
- adding to /etc/hosts fileHow to Add Hosts to the System's
Known Network
- adding to security template
- How to Add a Range of Hosts to a Security
Template
- How to Add a Host to a Security Template
- assigning a templateAdding Hosts to Security Templates
- networking conceptsTrusted Network Communications
I
- IDLECMD keyword
- changing defaultChanging the System's Idle Settings
- IDLETIME keyword
- changing defaultChanging the System's Idle Settings
- IKE
- labels in tunnel modeLabels and Accreditation in Tunnel Mode IPsec
- immutable zones
- Trusted Extensions andCreating Labeled Zones
- importing
- softwareAdding Software to Trusted Extensions
- initial setup team
- checklist for configuring Trusted ExtensionsChecklist for Configuring Trusted Extensions
- inner labelLabels for IPsec-Protected Exchanges
- installing
- label_encodings file
- How to Check and Install Your Label Encodings
File
- Enable Trusted Extensions
- LDAP server on Trusted ExtensionsConfiguring LDAP on a Trusted Extensions System
- Oracle Solaris OS for Trusted ExtensionsAdding the Trusted Extensions Feature to Oracle Solaris
- interfaces
- adding to security template
- How to Add a Range of Hosts to a Security
Template
- How to Add a Host to a Security Template
- verifying they are upHow to Verify That a System's Interfaces
Are Up
- internationalizing Seelocalizing
- IP addresses
- 0.0.0.0 host addressTrusted Extensions Host Address
and Fallback Mechanism Entries
- fallback mechanism in trusted networkingTrusted Network Fallback Mechanism
- ipadm commandNetwork Commands in Trusted Extensions
- IPsec
- label extensionsLabel Extensions for IPsec Security Associations
- labels in tunnel modeLabels and Accreditation in Tunnel Mode IPsec
- labels on trusted exchangesLabels for IPsec-Protected Exchanges
- protections with label extensionsConfidentiality and Integrity Protections With
Label Extensions
- with Trusted Extensions labelsAdministration of Labeled IPsec
- ipseckey commandNetwork Commands in Trusted Extensions
- ipTnetHostTrusted Extensions Database Schema for LDAP
- ipTnetNumberTrusted Extensions Database Schema for LDAP
- ipTnetTemplateTrusted Extensions Database Schema for LDAP
- ipTnetTemplateNameTrusted Extensions Database Schema for LDAP
- IPv6
- entry in /etc/system fileHow to Configure an IPv6 CIPSO Network in Trusted Extensions
- troubleshootingHow to Configure an IPv6 CIPSO Network in Trusted Extensions
K
- kernel zones
- Trusted Extensions andCreating Labeled Zones
- keyboard shutdown
- enablingHow to Change Security Defaults in System
Files
- kmem kernel image fileEvaluating Software for Security
L
- .link_files file
- setting up for usersHow to Configure Startup Files for Users in Trusted Extensions
- .link_files file
- description.copy_files and .link_files Files
- label extensions
- IKE negotiationsLabel Extensions for IKE
- IPsec SAsLabel Extensions for IPsec Security Associations
- label ranges
- restricting remote accessRemote Administration in Trusted Extensions
- label_encodings file
- checkingHow to Check and Install Your Label Encodings
File
- contentsLabel Encodings File
- installing
- How to Check and Install Your Label Encodings
File
- Enable Trusted Extensions
- localizingFor International Customers of Trusted Extensions
- modifying
- How to Check and Install Your Label Encodings
File
- Enable Trusted Extensions
- reference for labeled printingLabeled Printer Output
- source of accreditation rangesLabel Encodings File
- labeladm commandInstalling and Enabling Trusted Extensions
- enabling Trusted ExtensionsInstalling and Enabling Trusted Extensions
- installing encodings file
- Enable Trusted Extensions
- Enable Trusted Extensions
- removing Trusted ExtensionsHow to Remove Trusted Extensions From the System
- labeld service
- disablingHow to Remove Trusted Extensions From the System
- enablingInstalling and Enabling Trusted Extensions
- labeled IPsec SeeIPsec
- labeled multicast packetsTrusted Extensions Multicast Packets
- labeled printing
- banner pagesLabeled Banner and Trailer Pages
- body pagesLabeled Body Pages
- removing labelHow to Create a Rights Profile for Convenient Authorizations
- without banner pageHow to Create a Rights Profile for Convenient Authorizations
- Labeled Zone Manager Seetxzonemgr script
- labeled zones Seezones
- labeling
- turning on labelsLog In to Trusted Extensions
- zonesHow to Create Labeled Zones Interactively
- Labeling Hosts and Networks (Tasks)Labeling Hosts and Networks
- labels See Alsolabel ranges
- accreditation in tunnel modeLabels and Accreditation in Tunnel Mode IPsec
- authorizing a user or role to change label of dataHow to Enable a User to Change the Security
Level of Data
- classification componentDominance Relationships Between Labels
- compartment componentDominance Relationships Between Labels
- default in remote host templatesNetwork Security Attributes in Trusted Extensions
- describedTrusted Extensions and Access Control
- determining text equivalentsHow to Obtain a Readable Label
From Its Hexadecimal Form
- displaying in hexadecimalHow to Obtain the Hexadecimal Equivalent
for a Label
- displaying labels of file systems in labeled zoneDisplaying the Labels of File Systems in the restricted Zone
- dominanceDominance Relationships Between Labels
- extensions for IKE SAsLabel Extensions for IKE
- extensions for IPsec SAsLabel Extensions for IPsec Security Associations
- of processesWhat Labels Protect and Where Labels Appear
- of user processesSession Range
- on IPsec exchangesLabels for IPsec-Protected Exchanges
- on printoutsLabeled Printer Output
- overviewLabels in Trusted Extensions Software
- planningDevising a Label Strategy
- printing without page labelsHow to Enable Specific Users and Roles to
Bypass Labeling Printed Output
- relationshipsDominance Relationships Between Labels
- repairing in internal databasesHow to Obtain a Readable Label
From Its Hexadecimal Form
- specifying for zonesHow to Create Labeled Zones Interactively
- troubleshootingHow to Obtain a Readable Label
From Its Hexadecimal Form
- well-formedLabel Ranges
- laptops
- planningPlanning for Multilevel Services
- LDAP
- naming service for Trusted ExtensionsConfiguring LDAP for Trusted Extensions
- planningPlanning for the LDAP Naming Service in Trusted Extensions
- referencesQuick Reference for the LDAP Directory Service in Trusted Extensions
- troubleshootingHow to Debug a Client's Connection
to the LDAP Server
- Trusted Extensions database schemaTrusted Extensions Database Schema for LDAP
- Trusted Extensions databasesUsing the LDAP Naming Service in Trusted Extensions
- LDAP configuration
- creating clientMake the Global Zone an LDAP Client in Trusted Extensions
- for Trusted ExtensionsConfiguring LDAP on a Trusted Extensions System
- NFS servers, andConfiguring LDAP on a Trusted Extensions System
- LDAP server
- configuring multilevel portConfigure a Multilevel Port for the LDAP Server
- configuring proxy for Trusted Extensions clientsConfiguring a Trusted Extensions LDAP Proxy Server
- creating proxy for Trusted Extensions clientsConfiguring a Trusted Extensions LDAP Proxy Server
- limiting
- defined hosts on the networkHow to Limit the Hosts That Can Be Contacted on the Trusted Network
- localizing
- configuring labeled printoutstsol_separator.ps Configuration
File
- LOFS
- mounting datasets in Trusted ExtensionsMount Possibilities in Trusted Extensions
- logging in
- to a home directory server
- How to Enable Users to Access Their
Remote Home Directories by Configuring the Automounter on Each Server
- How to Enable Users to Access Their
Remote Home Directories at Every Label by Logging In to Each NFS Server
- using ssh commandHow to Log In and Administer a Remote Trusted Extensions System
- login
- by rolesRoles in Trusted Extensions
- remoteEnable Remote Administration of a Remote Trusted Extensions System
- logout
- requiringChanging the System's Idle Settings
M
- MAC Seemandatory access control (MAC)
- mail
- administeringAbout Multilevel Mail in Trusted Extensions
- implementation in Trusted ExtensionsTrusted Extensions Mail Features
- multilevelMultilevel Mail Service
- man pages
- quick reference for Trusted Extensions administratorsList of Trusted Extensions Man Pages
- managing Seeadministering
- Managing Printing in Trusted Extensions (Task Map)Managing Printing in Trusted Extensions
- Managing Users and Rights (Task Map)Managing Users and Rights
- Managing Zones (Task Map)Managing Zones
- mandatory access control (MAC)
- enforcing on the networkAbout the Trusted Network
- in Trusted ExtensionsTrusted Extensions and Access Control
- maximum labels
- remote host templatesNetwork Security Attributes in Trusted Extensions
- minimum labels
- remote host templatesNetwork Security Attributes in Trusted Extensions
- MLPs Seemultilevel ports (MLPs)
- mlslabel property
- ADMIN_HIGH label andmlslabel Property
and Mounting Single-Level File Systems
- modifying
- label_encodings fileHow to Check and Install Your Label Encodings
File
- mounting
- file systemsHow to Share File Systems From a Labeled Zone
- files by loopback mountingHow to Loopback Mount a File That
Is Usually Not Visible in a Labeled Zone
- overviewResults of Sharing and Mounting File Systems in Trusted Extensions
- troubleshootingHow to Troubleshoot Mount Failures in Trusted Extensions
- ZFS dataset on labeled zoneHow to Share a ZFS Dataset From
a Labeled Zone
- mounting datasets in Trusted ExtensionsMount Possibilities in Trusted Extensions
- multicast packetsTrusted Extensions Multicast Packets
- multilevel datasets
- creatingHow to Create and Share a Multilevel Dataset
- overviewMultilevel Datasets for Relabeling Files
- multilevel mounts
- NFS protocol versionsTrusted Extensions Software and NFS Protocol
Versions
- multilevel ports (MLPs)
- administeringDisplaying Multilevel Ports on a System
- example of NFSv3 MLPConfiguring a Private Multilevel Port for NFSv3 Over udp
- example of web proxy MLPHow to Create a Multilevel Port
for a Zone
- multilevel printing
- accessing by print clientHow to Enable a Trusted Extensions Client to
Access a Printer
- configuring
- How to Configure a Network Printer
- How to Configure a Multilevel Print Server
and Its Printers
- multilevel server
- planningPlanning for Multilevel Services
N
- name service cache daemon Seenscd daemon
- names
- specifying for zonesHow to Create Labeled Zones Interactively
- names of file systemsHow to Share File Systems From a Labeled Zone
- naming
- zonesHow to Create Labeled Zones Interactively
- naming services
- databases unique to Trusted ExtensionsUsing the LDAP Naming Service in Trusted Extensions
- LDAPConfiguring LDAP for Trusted Extensions
- net_mac_aware privilegeHow to Disable the Mounting of Lower-Level
Files
- netstat command
- How to Debug the Trusted Extensions Network
- Network Commands in Trusted Extensions
- network
- Seetrusted network
- SeeTrusted Extensions network
- network databases
- descriptionNetwork Configuration Databases in Trusted Extensions
- in LDAPConfiguring LDAP for Trusted Extensions
- network packetsTrusted Extensions Data Packets
- networking conceptsTrusted Network Communications
- NFS
- mounting datasets in Trusted ExtensionsMount Possibilities in Trusted Extensions
- NFS mounts
- accessing lower-level directoriesNFS Server and Client Configuration in Trusted Extensions
- in global and labeled zonesResults of Sharing and Mounting File Systems in Trusted Extensions
- NFS servers
- LDAP servers, andConfiguring LDAP on a Trusted Extensions System
- nscd daemon
- adding to every labeled zoneHow to Configure a Separate Name Service for
Each Labeled Zone
O
- Oracle Solaris OS
- differences from Trusted ExtensionsDifferences Between Trusted Extensions and the Oracle Solaris OS
- differences from Trusted Extensions auditingTrusted Extensions and Auditing
- similarities with Trusted ExtensionsSimilarities Between Trusted Extensions and the Oracle Solaris OS
- similarities with Trusted Extensions auditingTrusted Extensions and Auditing
P
- packages
- Trusted Extensions featureAdd Trusted Extensions Packages to an Oracle Solaris System
- passwords
- assigningSecurity Attribute Assignment to Users in Trusted Extensions
- changing in labeled zoneHow to Enforce a New Local User
Password in a Labeled Zone
- planning See AlsoTrusted Extensions use
- account creationPlanning User Security in Trusted Extensions
- administration strategyPlanning Who Will Configure Trusted Extensions
- auditingPlanning for Auditing in Trusted Extensions
- hardwarePlanning System Hardware and Capacity for Trusted Extensions
- labelsDevising a Label Strategy
- laptop configurationPlanning for Multilevel Services
- LDAP naming servicePlanning for the LDAP Naming Service in Trusted Extensions
- networkPlanning Your Trusted Network
- Trusted ExtensionsPlanning for Security in Trusted Extensions
- Trusted Extensions configuration strategyForming an Install Team for Trusted Extensions
- zonesPlanning Your Labeled Zones in Trusted Extensions
- policy.conf file
- changing defaultsHow to Change Security Defaults in System
Files
- changing Trusted Extensions keywordsChanging the System's Idle Settings
- defaultspolicy.conf File Defaults in Trusted Extensions
- how to editHow to Modify policy.conf Defaults
- preventing Seeprotecting
- Print without Banner authorizationHow to Create a Rights Profile for Convenient Authorizations
- Print without Label authorizationHow to Create a Rights Profile for Convenient Authorizations
- printed output Seeprinting
- printer output Seeprinting
- printing
- and label_encodings fileLabel Encodings File
- authorizationsTrusted Extensions Print Interfaces (Reference)
- authorizations for unlabeled output from a public systemAssigning Printing-Related Authorizations to All Users of a
System
- configuring for multilevel labeled output
- How to Configure a Network Printer
- How to Configure a Multilevel Print Server
and Its Printers
- configuring for print clientHow to Enable a Trusted Extensions Client to
Access a Printer
- configuring labeled zoneHow to Configure a Zone as a Single-Level
Print Server
- configuring labels and texttsol_separator.ps Configuration
File
- configuring public print jobsSending Public Print Jobs to an Unlabeled Printer
- in local languagetsol_separator.ps Configuration
File
- internationalizing labeled outputtsol_separator.ps Configuration
File
- labeling an Oracle Solaris print serverHow to Assign a Label to an Unlabeled Print
Server
- localizing labeled outputtsol_separator.ps Configuration
File
- managingLabels, Printers, and Printing
- PostScriptPostScript Printing of Security Information
- preventing labels on outputHow to Remove Banner and Trailer Pages
- public jobs from an Oracle Solaris print serverSending Public Print Jobs to an Unlabeled Printer
- using an Oracle Solaris print serverHow to Assign a Label to an Unlabeled Print
Server
- without labeled banners and trailersHow to Create a Rights Profile for Convenient Authorizations
- without page labels
- How to Enable Specific Users and Roles to
Bypass Labeling Printed Output
- How to Create a Rights Profile for Convenient Authorizations
- printouts Seeprinting
- privileges
- changing defaults for usersSecurity Attribute Assignment to Users in Trusted Extensions
- non-obvious reasons for requiringEvaluating Software for Security
- removing proc_info from basic setModifying Every User's Basic Privilege Set
- restricting users'How to Restrict a User's Set of
Privileges
- proc_info privilege
- removing from basic setModifying Every User's Basic Privilege Set
- procedures Seetasks and task maps
- processes
- labels ofWhat Labels Protect and Where Labels Appear
- labels of user processesSession Range
- preventing users from seeing others' processesModifying Every User's Basic Privilege Set
- profiles Seerights profiles
- programs Seeapplications
- protecting
- file systems by using non-proprietary namesHow to Share File Systems From a Labeled Zone
- files at lower labels from being accessedHow to Disable the Mounting of Lower-Level
Files
- information with labelsWhat Labels Protect and Where Labels Appear
- labeled hosts from access by arbitrary hostsHow to Limit the Hosts That Can Be Contacted on the Trusted Network
R
- real UID of root
- required for applicationsEvaluating Software for Security
- rebooting
- activating labelsLog In to Trusted Extensions
- enabling login to labeled zoneHow to Enable Users to Log In to a Labeled
Zone
- Reducing Printing Restrictions in Trusted Extensions (Task Map)Reducing Printing Restrictions in Trusted Extensions
- regular users Seeusers
- relabeling data
- eliminating IOHow to Create and Share a Multilevel Dataset
- relabeling informationHow to Enable a User to Change the Security
Level of Data
- remote administration
- defaultsRemote Administration in Trusted Extensions
- methodsMethods for Administering Remote Systems in Trusted Extensions
- remote desktop
- accessingHow to Configure a Trusted Extensions System With Xvnc for Remote Access
- remote host templates
- 0.0.0.0/0 wildcard assignmentHow to Limit the Hosts That Can Be Contacted on the Trusted Network
- adding systems to
- How to Add a Range of Hosts to a Security
Template
- How to Add a Host to a Security Template
- assigningAdding Hosts to Security Templates
- creatingCreating Security Templates
- entry for Sun Ray serversHow to Limit the Hosts That Can Be Contacted on the Trusted Network
- remote hosts
- using fallback mechanism in tnrhdbTrusted Network Fallback Mechanism
- Remote Login authorizationHow to Create a Rights Profile for Convenient Authorizations
- remote systems
- configuring for role assumptionEnable Remote Administration of a Remote Trusted Extensions System
- removing
- labels on printoutsHow to Remove Banner and Trailer Pages
- zone-specific nscd daemonRemoving a Name Service Cache From Each Labeled Zone
- removing Trusted Extensions Seedisabling
- repairing
- labels in internal databasesHow to Obtain a Readable Label
From Its Hexadecimal Form
- restricting
- access to lower-level filesHow to Disable the Mounting of Lower-Level
Files
- access to printers with labels
- Restricting Access to Printers and Print
Job Information in Trusted Extensions
- Differences Between Trusted Extensions Printing in Oracle Solaris 10 and Oracle Solaris 11.4
- mounts of lower-level filesHow to Disable the Mounting of Lower-Level
Files
- printer access with labels
- Restricting Access to Printers and Print
Job Information in Trusted Extensions
- Differences Between Trusted Extensions Printing in Oracle Solaris 10 and Oracle Solaris 11.4
- remote accessRemote Administration in Trusted Extensions
- rights Seerights profiles
- rights profiles
- assigningSecurity Attribute Assignment to Users in Trusted Extensions
- Convenient AuthorizationsHow to Create a Rights Profile for Convenient Authorizations
- roadmaps
- Task Map: Choosing a Trusted Extensions ConfigurationTask Map: Choosing a Trusted Extensions Configuration
- Task Map: Configuring Trusted Extensions to Your Site's RequirementsTask Map: Configuring Trusted Extensions to
Meet Your Site's Requirements
- Task Map: Configuring Trusted Extensions With the Provided DefaultsTask Map: Configuring Trusted Extensions With
the Provided Defaults
- Task Map: Preparing For and Enabling Trusted ExtensionsTask Map: Preparing for and Enabling Trusted Extensions
- role workspace
- global zoneRoles in Trusted Extensions
- roleadd commandHow to Create the Security Administrator
Role in Trusted Extensions
- roles
- adding LDAP role with roleaddCreating the Security Administrator Role in LDAP
- adding local role with roleaddHow to Create the Security Administrator
Role in Trusted Extensions
- administering auditingAuditing in Trusted Extensions
- assigning rightsSecurity Attribute Assignment to Users in Trusted Extensions
- assumingRoles in Trusted Extensions
- creatingRole Creation in Trusted Extensions
- creating Security AdministratorHow to Create the Security Administrator
Role in Trusted Extensions
- deciding if ARMORSecure System Hardware and Make Security Decisions Before Enabling Trusted Extensions
- determining when to createSecure System Hardware and Make Security Decisions Before Enabling Trusted Extensions
- verifying they workHow to Verify That the Trusted Extensions Roles
Work
- workspacesRoles in Trusted Extensions
- root UID
- required for applicationsEvaluating Software for Security
- route commandNetwork Commands in Trusted Extensions
- routingAbout Routing in Trusted Extensions
- accreditation checksTrusted Extensions Accreditation Checks
- commands in Trusted ExtensionsRouting Commands in Trusted Extensions
- conceptsAdministration of Routing in Trusted Extensions
- example ofGateways in Trusted Extensions
- tables
- Choosing Routers in Trusted Extensions
- Routing Table Entries in Trusted Extensions
- using route commandHow to Add Default Routes
S
- scripts
- /usr/bin/txzonemgrHow to Display Ready or Running Zones
- /usr/sbin/txzonemgr
- Zone Administration Utilities in Trusted Extensions
- Trusted Extensions Administrative
Tools
- getmountsHow to Display the Labels of Mounted
Files
- security
- initial setup teamInitial Setup Team Responsibilities
- site security policy at a labeled siteSite Security Policy for Trusted Extensions
- Security Administrator role
- administering printer securityLabels, Printers, and Printing
- administering usersManaging Users and Rights
- assigning authorizations to usersHow to Create a Rights Profile for Convenient Authorizations
- creatingHow to Create the Security Administrator
Role in Trusted Extensions
- creating Convenient Authorizations rights profileHow to Create a Rights Profile for Convenient Authorizations
- enabling unlabeled body pages from a public systemAssigning Printing-Related Authorizations to All Users of a
System
- security administrators SeeSecurity Administrator role
- security attributesRouting Table Entries in Trusted Extensions
- modifying defaults for all usersHow to Modify policy.conf Defaults
- modifying user defaultsHow to Modify Default User Label Attributes
- setting for remote hostsCreating Security Templates
- using in routingHow to Add Default Routes
- security information
- on printoutsLabeled Printer Output
- planning for Trusted ExtensionsResolving Additional Issues Before Enabling Trusted Extensions
- security label set
- remote host templatesNetwork Security Attributes in Trusted Extensions
- security mechanisms
- extensibleExtension of Oracle Solaris Security Features by Trusted Extensions
- Oracle SolarisSecurity Mechanisms for Oracle Solaris Software
- security templates Seeremote host templates
- session rangeSession Range
- Setting Up Remote Administration in Trusted Extensions (Task Map)Configuring and Administering Remote Systems in Trusted Extensions
- shared-IP address Seeall-zones address
- sharing
- ZFS dataset from labeled zoneHow to Share a ZFS Dataset From
a Labeled Zone
- Shutdown authorizationHow to Create a Rights Profile for Convenient Authorizations
- similarities
- between Trusted Extensions and Oracle Solaris auditingTrusted Extensions and Auditing
- between Trusted Extensions and Oracle Solaris OSSimilarities Between Trusted Extensions and the Oracle Solaris OS
- single-label
- loginAccount Label Range
- printing in a zoneHow to Configure a Zone as a Single-Level
Print Server
- site security policy
- tasks involved at a labeled siteSite Security Policy for Trusted Extensions
- understandingUnderstanding Your Site's Security Policy
- snoop command
- How to Debug the Trusted Extensions Network
- Network Commands in Trusted Extensions
- software
- administering third-partySoftware Management in Trusted Extensions
- importingAdding Software to Trusted Extensions
- solaris.print.admin
- authorizationTrusted Extensions Print Interfaces (Reference)
- solaris.print.list
- authorizationTrusted Extensions Print Interfaces (Reference)
- solaris.print.nobanner
- authorizationTrusted Extensions Print Interfaces (Reference)
- solaris.print.nobanner authorizationAssigning Printing-Related Authorizations to All Users of a
System
- solaris.print.unlabeled
- authorizationTrusted Extensions Print Interfaces (Reference)
- solaris.print.unlabeled authorizationAssigning Printing-Related Authorizations to All Users of a
System
- startup files
- procedures for customizingHow to Configure Startup Files for Users in Trusted Extensions
- Stop-A
- enablingHow to Change Security Defaults in System
Files
- Sun Ray systems
- 0.0.0.0/32 address for client contactHow to Limit the Hosts That Can Be Contacted on the Trusted Network
- System Administrator role
- administering printersLabels, Printers, and Printing
- creatingHow to Create a System Administrator
Role
- system files
- editingHow to Change Security Defaults in System
Files
- label_encodingsHow to Check and Install Your Label Encodings
File
- tsol_separator.psHow to Enable Specific Users and Roles to
Bypass Labeling Printed Output
T
- tasks and task maps
- Additional Trusted Extensions Configuration TasksAdditional Trusted Extensions Configuration Tasks
- Common Tasks in Trusted Extensions Task Map)Performing Common Tasks in Trusted Extensions
- Configuring Labeled IPsec (Task Map)Configuring Labeled IPsec
- Configuring Labeled Printing (Task Map)Configuring Labeled Printing
- Creating Labeled ZonesCreating Labeled Zones
- Customizing User Environment for Security (Task Map)Customizing the User Environment for Security
- Labeling Hosts and Networks (Tasks)Labeling Hosts and Networks
- Managing Printing in Trusted Extensions (Task Map)Managing Printing in Trusted Extensions
- Managing Users and RightsManaging Users and Rights
- Managing Zones (Task Map)Managing Zones
- Reducing Printing Restrictions in Trusted Extensions (Task Map)Reducing Printing Restrictions in Trusted Extensions
- Setting Up Remote Administration in Trusted Extensions (Task Map)Configuring and Administering Remote Systems in Trusted Extensions
- Task Map: Choosing a Trusted Extensions ConfigurationTask Map: Choosing a Trusted Extensions Configuration
- Task Map: Configuring Trusted Extensions to Your Site's RequirementsTask Map: Configuring Trusted Extensions to
Meet Your Site's Requirements
- Task Map: Configuring Trusted Extensions With the Provided DefaultsTask Map: Configuring Trusted Extensions With
the Provided Defaults
- Task Map: Preparing For and Enabling Trusted ExtensionsTask Map: Preparing for and Enabling Trusted Extensions
- Troubleshooting the Trusted Network (Task Map)Troubleshooting the Trusted Network
- Viewing Existing Security Templates (Tasks)Viewing Existing Security Templates
- templates Seeremote host templates
- text label equivalents
- determiningHow to Obtain a Readable Label
From Its Hexadecimal Form
- tncfg command
- creating a multilevel portHow to Create a Multilevel Port
for a Zone
- descriptionNetwork Commands in Trusted Extensions
- modifying DOI valueHow to Configure a Different Domain of Interpretation
- tnchkdb command
- descriptionNetwork Commands in Trusted Extensions
- tnctl command
- descriptionNetwork Commands in Trusted Extensions
- tnd command
- descriptionNetwork Commands in Trusted Extensions
- tninfo command
- descriptionNetwork Commands in Trusted Extensions
- usingHow to Debug a Client's Connection
to the LDAP Server
- tnrhdb
- LDAP database schemaTrusted Extensions Database Schema for LDAP
- tnrhtp
- LDAP database schemaTrusted Extensions Database Schema for LDAP
- tools Seeadministrative tools
- trailer pages Seebanner pages
- translation Seelocalizing
- troubleshooting
- IPv6 configurationHow to Configure an IPv6 CIPSO Network in Trusted Extensions
- LDAPHow to Debug a Client's Connection
to the LDAP Server
- mounted file systemsHow to Troubleshoot Mount Failures in Trusted Extensions
- networkTroubleshooting the Trusted Network
- repairing labels in internal databasesHow to Obtain a Readable Label
From Its Hexadecimal Form
- trusted networkHow to Debug the Trusted Extensions Network
- verifying interface is upHow to Verify That a System's Interfaces
Are Up
- viewing ZFS dataset mounted in lower-level zoneSharing and Mounting a ZFS Dataset From Labeled Zones
- Troubleshooting the Trusted Network (Task Map)Troubleshooting the Trusted Network
- Trusted Extensions See AlsoTrusted Extensions planning
- addingAdd Trusted Extensions Packages to an Oracle Solaris System
- adding to Oracle SolarisInstalling and Enabling Trusted Extensions
- decisions to make before enablingSecure System Hardware and Make Security Decisions Before Enabling Trusted Extensions
- differences from Oracle Solaris administrator's perspectiveResults of Enabling Trusted Extensions From an Administrator's
Perspective
- differences from Oracle Solaris auditingTrusted Extensions and Auditing
- differences from Oracle Solaris OSDifferences Between Trusted Extensions and the Oracle Solaris OS
- disablingHow to Remove Trusted Extensions From the System
- enablingInstalling and Enabling Trusted Extensions
- IPsec protectionsLabels for IPsec-Protected Exchanges
- man pages quick referenceList of Trusted Extensions Man Pages
- memory requirementsPlanning System Hardware and Capacity for Trusted Extensions
- networkingTrusted Networking
- new features in this releaseWhat's New in Trusted Extensions in Oracle Solaris 11.4
- planning configuration strategyForming an Install Team for Trusted Extensions
- planning forPlanning for Security in Trusted Extensions
- planning hardwarePlanning System Hardware and Capacity for Trusted Extensions
- planning networkPlanning Your Trusted Network
- preparing forResolving Security Issues Before Installing Trusted Extensions
- quick reference to administrationQuick Reference to Trusted Extensions Administration
- results before configurationResults of Enabling Trusted Extensions From an Administrator's
Perspective
- similarities with Oracle Solaris auditingTrusted Extensions and Auditing
- similarities with Oracle Solaris OSSimilarities Between Trusted Extensions and the Oracle Solaris OS
- two-role configuration strategyForming an Install Team for Trusted Extensions
- Trusted Extensions configuration
- adding network databases to LDAP serverPopulate the LDAP Server With Trusted Extensions Data
- changing default DOI valueHow to Configure a Different Domain of Interpretation
- databases for LDAPConfiguring LDAP on a Trusted Extensions System
- division of tasksInitial Setup Team Responsibilities
- initial proceduresConfiguring Trusted Extensions
- initial setup team responsibilitiesInitial Setup Team Responsibilities
- labeled zonesCreating Labeled Zones
- LDAPConfiguring LDAP on a Trusted Extensions System
- reboot to activate labelsLog In to Trusted Extensions
- remote systemsRemote Administration in Trusted Extensions
- task mapsConfiguration Roadmap for Trusted Extensions
- Trusted Extensions network
- adding zone-specific nscd daemonHow to Configure a Separate Name Service for
Each Labeled Zone
- enabling IPv6 for CIPSO packetsHow to Configure an IPv6 CIPSO Network in Trusted Extensions
- planningPlanning Your Trusted Network
- removing zone-specific nscd daemonRemoving a Name Service Cache From Each Labeled Zone
- trusted network
- 0.0.0.0/0 wildcard addressHow to Limit the Hosts That Can Be Contacted on the Trusted Network
- 0.0.0.0 tnrhdb entryHow to Limit the Hosts That Can Be Contacted on the Trusted Network
- conceptsTrusted Networking
- default labelingTrusted Extensions Accreditation Checks
- example of routingGateways in Trusted Extensions
- host typesHost Type and Template Name in Security Templates
- labels and MAC enforcementAbout the Trusted Network
- using templatesCreating Security Templates
- trusted path attribute
- when availableRoles and Trusted Extensions
- trusted programs
- addingDeveloper Responsibilities When Creating Trusted
Programs
- definedEvaluating Software for Security
- trustworthy programsEvaluating Software for Security
- tsol_separator.ps file
- configurable valuestsol_separator.ps Configuration
File
- customizing labeled printingLabeled Printer Output
- txzonemgr scriptHow to Display Ready or Running Zones
- –c optionHow to Create a Default Trusted Extensions System
U
- /usr/lib/cups/filter/tsol_separator.ps fileLabeled Printer Output
- /usr/local/scripts/getmounts scriptHow to Display the Labels of Mounted
Files
- /usr/sbin/txzonemgr script
- Zone Administration Utilities in Trusted Extensions
- Trusted Extensions Administrative
Tools
- How to Create a Default Trusted Extensions System
- unlabeled printing
- configuringReducing Printing Restrictions in Trusted Extensions
- updatehome command.copy_files and .link_files Files
- Upgrade File Label authorizationHow to Create a Rights Profile for Convenient Authorizations
- useradd commandUsing the useradd Command to Create a Local User
- users
- accessing printersLabels, Printers, and Printing
- adding local user with useraddUsing the useradd Command to Create a Local User
- assigning authorizations toSecurity Attribute Assignment to Users in Trusted Extensions
- assigning labelsSecurity Attribute Assignment to Users in Trusted Extensions
- assigning passwordsSecurity Attribute Assignment to Users in Trusted Extensions
- assigning rightsSecurity Attribute Assignment to Users in Trusted Extensions
- assigning roles toSecurity Attribute Assignment to Users in Trusted Extensions
- authorizations forHow to Create a Rights Profile for Convenient Authorizations
- changing default privilegesSecurity Attribute Assignment to Users in Trusted Extensions
- creatingAdministrator Responsibilities
for Users
- creating initial usersHow to Create Users Who Can Assume Roles in Trusted Extensions
- customizing environmentCustomizing the User Environment for Security
- labels of processesSession Range
- modifying security defaultsHow to Modify Default User Label Attributes
- modifying security defaults for all usersHow to Modify policy.conf Defaults
- planning forDecisions to Make Before Creating
Users in Trusted Extensions
- preventing account lockingHow to Prevent Account Locking
for Users
- preventing from seeing others' processesModifying Every User's Basic Privilege Set
- printingLabels, Printers, and Printing
- removing some privilegesHow to Restrict a User's Set of
Privileges
- session rangeSession Range
- setting up skeleton directoriesHow to Configure Startup Files for Users in Trusted Extensions
- startup filesHow to Configure Startup Files for Users in Trusted Extensions
- using .copy_files fileHow to Configure Startup Files for Users in Trusted Extensions
- using .link_files fileHow to Configure Startup Files for Users in Trusted Extensions
V
- verifying
- interface is upHow to Verify That a System's Interfaces
Are Up
- label_encodings fileHow to Check and Install Your Label Encodings
File
- roles are workingHow to Verify That the Trusted Extensions Roles
Work
- viewing Seeaccessing
- virtual network computing (VNC) SeeXvnc systems running Trusted Extensions
W
- well-formed labelsLabel Ranges
- wildcard address Seefallback mechanism
- wire labelLabels for IPsec-Protected Exchanges
- workspaces
- global zoneRoles in Trusted Extensions
X
- Xvnc
- accessing multilevel remotelyHow to Configure a Trusted Extensions System With Xvnc for Remote Access
- Xvnc systems running Trusted Extensions
- remote access to
- How to Configure a Trusted Extensions System With Xvnc for Remote Access
- Methods for Administering Remote Systems in Trusted Extensions
Z
- zenity scriptHow to Create a Default Trusted Extensions System
- ZFS
- adding dataset to labeled zoneHow to Share a ZFS Dataset From
a Labeled Zone
- fast zone creation methodZone Creation in Trusted Extensions
- mounting dataset read-write on labeled zoneHow to Share a ZFS Dataset From
a Labeled Zone
- mounting datasets in Trusted ExtensionsMount Possibilities in Trusted Extensions
- multilevel datasets
- Multilevel Datasets for Relabeling Files
- How to Create and Share a Multilevel Dataset
- viewing mounted dataset read-only from higher-level zoneSharing and Mounting a ZFS Dataset From Labeled Zones
- zones
- adding nscd daemon to each labeled zoneHow to Configure a Separate Name Service for
Each Labeled Zone
- administeringManaging Zones
- creating MLPHow to Create a Multilevel Port
for a Zone
- creating MLP for NFSv3Configuring a Private Multilevel Port for NFSv3 Over udp
- creating secondaryHow to Create a Secondary Labeled Zone
- deciding creation methodPlanning Your Labeled Zones in Trusted Extensions
- deletingHow to Remove Trusted Extensions From the System
- displaying labels of file systemsDisplaying the Labels of File Systems in the restricted Zone
- displaying statusHow to Display Ready or Running Zones
- enabling login toHow to Enable Users to Log In to a Labeled
Zone
- for isolating labeled servicesHow to Create a Secondary Labeled Zone
- globalZones in Trusted Extensions
- global zone processes andGlobal Zone Processes and Labeled
Zones
- immutable and Trusted ExtensionsCreating Labeled Zones
- in Trusted ExtensionsManaging Zones in Trusted Extensions
- kernel and Trusted ExtensionsCreating Labeled Zones
- managingManaging Zones in Trusted Extensions
- net_mac_aware privilegeHow to NFS Mount Files in a Labeled Zone
- primaryPrimary and Secondary Labeled
Zones
- removing nscd daemon from labeled zonesRemoving a Name Service Cache From Each Labeled Zone
- secondaryPrimary and Secondary Labeled
Zones
- specifying labelsHow to Create Labeled Zones Interactively
- specifying namesHow to Create Labeled Zones Interactively
- txzonemgr scriptHow to Create a Default Trusted Extensions System