Trusted Extensions Label Administration

How to Analyze and Verify the label_encodings File

Before You Begin

You must be in the Security Administrator role in the global zone.

1. Check the label definitions and the relationships of the labels.

   In a terminal, use the chk_encodings -a command to analyze and report on label relationships.

   $ /usr/sbin/chk_encodings -a encodings-file

   If the file does not pass, see How to Debug a label_encodings File for assistance. Do not continue to the next step until the file represents your label relationships correctly.

2. Verify the syntax of the file.
   1. Run the chk_encodings command.

      # /usr/sbin/chk_encodings encodings-file

   2. Resolve errors.

      If the command reports errors, the errors must be resolved before continuing.

3. Make the file the active label_encodings file.

   # cp /full-pathname-of-label-encodings-file \
   /etc/security/tsol/label.encodings.site
   # cd /etc/security/tsol
   # cp label_encodings label_encodings.tx.orig
   # cp label.encodings.site label_encodings

4. Test the encodings file.

   Where possible, test the file on a few systems before approving the file for all systems at your site. For example, install one labeled system as a file server and another labeled system as a user's system. Communicate between the two at all labels. Transfer files at all labels, and so on.

Next Steps

When the file is ready to be installed on the network, see How to Distribute the label_encodings File.