Trusted Extensions Configuration and Administration

Enable Trusted Extensions

Before You Begin

You must be in the root role in the global zone.

1. In a terminal window, enable the labeld service.

   ---

   Note - Use the labeladm command to control the labeld service. Do not manipulate the labeld services directly. For more information, see the labeladm(1M) man page.

   ---

   # labeladm enable -r

   The labeladm command provides several options when enabling the service.

   –i

   Prevents a confirmation prompt.

   –m

   Sends error messages to syslog and to the console.

   –n

   Tests the command without enabling the service.

   –r

   Delays enabling the service until after a system reboot. This is the same behavior as in previous releases.

2. Verify that the service is enabled.

   # labeladm info
        Labeling status: pending enable on boot
             Latest log: "/var/user/root/trusted-extensions-install-log"
   Label encodings file: /etc/security/tsol/label_encodings

   ---

   Caution  -  If you are enabling and configuring Trusted Extensions remotely, carefully review Remote Administration in Trusted Extensions. Do not reboot until you have configured the system to allow remote administration. If you do not configure the Trusted Extensions system for remote administration, you will be unable to reach it from a remote system.

   ---

3. If you have a customized label encodings file, install it now.

   # labeladm encodings path-to-encodings-file

4. Reboot the system.

   You must run this command if you used the –r option.

   # /usr/sbin/reboot

Next Steps

Continue with Log In to Trusted Extensions.