Go to main content

Trusted Extensions Label Administration

Exit Print View

Updated: August 2018
 
 

How to Specify Default and Inverse Words

Before You Begin

You must be in the Security Administrator role in the global zone.

  1. Back up the label_encodings file.
    # cp label_encodings label_encodings.orig
  2. Edit the label_encodings file.
    # pfedit encodings-file
  3. Specify initial compartments.

    In the CLASSIFICATIONS section, specify the initial compartments as part of the classification definition. For example, in the following CLASSIFICATIONS section, WEB COMPANY has two initial compartments, 4 and 5:

    CLASSIFICATIONS:
    name= PUBLIC;  sname= P;  value= 1;
    name= WEB COMPANY;  sname= WEBCO;  value= 2; initial compartments= 4-5 ;
  4. Specify a default word by assigning an initial compartment bit to the word.

    In the following example, the initial compartment bits, 4 and 5, are assigned to three words:

    name= DIVISION ONLY;  sname= DO;  minclass=  IUO; compartments= 4-5;
    name= WEBC AMERICA;  sname= WEBCA; minclass= IUO; compartments= 4;
    name= WEBC WORLD;  sname= WEBCW; minclass= IUO; compartments= 5;
  5. Specify an inverse word.

    Inverse words are created by preceding an initial compartment with a tilde (~).

    In the following example, the initial compartment bits, 4 and 5, are preceded by a tilde in the WEBC words:

    name= DIVISION ONLY;  sname= DO;  minclass=  IUO; compartments= 4-5;
    name= WEBC AMERICA;  sname= WEBCA; minclass= IUO; compartments= ~4;
    name= WEBC WORLD;  sname= WEBCW; minclass= IUO; compartments= ~5;
  6. Save your changes.

Next Steps

Verify the file by performing How to Analyze and Verify the label_encodings File.

Troubleshooting

    For any compartment bits that are not reserved for later assignment, you need to assign a word to the bit in the following sections:

  • SENSITIVITY LABELS: WORDS:

  • INFORMATION LABELS: WORDS:

  • COMPARTMENTS: WORDS: