You can modify the default user label attributes during the configuration of the first system. Use the modified encodings file when installing additional Trusted Extensions systems.
Caution - You must complete this task before any regular users access the system. |
For the defaults, see Figure 2, Table 2, Trusted Extensions Security Defaults for User Accounts in Planning User Security in Trusted Extensions.
# labeladm encodings Label encodings file: /var/tsol/encodings/label_encodings.fSaG.L
# cp /var/tsol/encodings/label_encodings.fSaG.L /tmp/tmp-encodings # pfedit /tmp/tmp-encodings
# labeladm encodings /tmp/tmp-encodings # /usr/sbin/reboot
Caution - The contents of the active label encodings file must be the same on all systems. |