Index
A
- access control
- access control lists (ACLs)
Discretionary Access Control
- discretionary access control (DAC)Discretionary Access Control
- mandatory access control (MAC)Mandatory Access Control
- permission bitsDiscretionary Access Control
- access control lists (ACLs)
- access control lists (ACLs)Discretionary Access Control
- accessing
- for read onlyLabels and Transactions
- for reading and writingLabels and Transactions
- for writingLabels and Transactions
- initialization files at every labelHow to Access Initialization Files at Every Label
- lower-level home directoriesContainers and Labels
- man pages in Trusted ExtensionsHow to Access the Trusted Extensions Man
Pages
- remote multilevel desktopLogging In Remotely to Trusted Extensions
- for read only
- adding
- labeled workspaceHow to Add a Workspace at
Your Minimum Label
- labeled workspace
- admin role SeeSystem Administrator role
- Allocate Device menu itemHow to Allocate a Device in Trusted Extensions
- allocating a deviceHow to Allocate a Device in Trusted Extensions
- troubleshootingHow to Allocate a Device in Trusted Extensions
- troubleshooting
- Assume rolename role menu itemHow to Assume a Role in Trusted Extensions
- assuming a roleHow to Assume a Role in Trusted Extensions
- authorizations
- changing labelsExamples of Label Relationships in Trusted Extensions
- for allocating devicesPeripheral Devices Are Protected
- changing labels
C
- .copy_files file
- described.copy_files File
- troubleshootingCreating a .link_files File
- described
- Change Login Password menu itemHow to Change Your Password in Trusted Extensions
- Change Workspace Label menu itemHow to Change the Label of a Workspace
- Change Workspace Password menu itemHow to Change Your Password in Trusted Extensions
- changing
- security level of data
- workspace labelHow to Change the Label of a Workspace
- your passwordHow to Change Your Password in Trusted Extensions
- choosing
- label or clearance during loginCheck Messages and Select Session Type
- label or clearance during login
- classification component of label
- clearances
- label typeSensitivity Labels and Clearances
- setting sessionCheck Messages and Select Session Type
- label type
- compartment component of label
- containers Seezones
- copy-and-paste
- effect on labelsExamples of Label Relationships in Trusted Extensions
- effect on labels
- creating
- $HOME/.copy_files fileHow to Access Initialization Files at Every Label
- $HOME/.link_files fileHow to Access Initialization Files at Every Label
- $HOME/.copy_files file
- customizing
D
- data
- changing label of
- determining label ofHow to Determine the Label of a File
- protecting with MACMandatory Access Control
- deallocating devices
- basic procedureHow to Deallocate a Device in Trusted Extensions
- basic procedure
- desktops
- in Trusted ExtensionsDesktop Login in Trusted Extensions
- keyboard focusHow to Change Your Password in Trusted Extensions
- logging in remotelyLogging In Remotely to Trusted Extensions
- in Trusted Extensions
- determining
- label of a fileHow to Determine the Label of a File
- label of a windowHow to Interactively Display a Window Label
- label of a file
- Device Manager
- deallocating devicesHow to Deallocate a Device in Trusted Extensions
- deallocating devices
- devices
- clearing prior to reuseErasing Data on Objects Prior to Object Reuse
- protectingPeripheral Devices Are Protected
- secured by allocation requirementDevice Security in Trusted Extensions
- troubleshootingHow to Allocate a Device in Trusted Extensions
- clearing prior to reuse
- directories
- visibility of home directoriesContainers and Labels
- visibility of home directories
- discretionary access control (DAC)
- definedDiscretionary Access Control
- defined
- dominance between labelsLabels and Transactions
- downgrading informationExamples of Label Relationships in Trusted Extensions
- drag-and-drop
- effect on labelsExamples of Label Relationships in Trusted Extensions
- effect on labels
E
- email
- label enforcementEnforcing MAC for Email Transactions
- label enforcement
- email instructions
- user responsibilitiesUser Responsibilities for Protecting Data
- user responsibilities
F
- failsafe loginTroubleshoot Login Problems
- File Browser
- displaying label of fileHow to Determine the Label of a File
- troubleshooting when it does not appearHow to Allocate a Device in Trusted Extensions
- displaying label of file
- File Manager
- troubleshooting when it does not appearHow to Allocate a Device in Trusted Extensions
- troubleshooting when it does not appear
- files
- $HOME/.copy_files
- $HOME/.link_files
- accessing initialization files at every labelHow to Access Initialization Files at Every Label
- viewing in a workspaceHow to View Your Files in a Labeled Workspace
- finding
- calendar events at every labelHow to Perform Some Common Desktop Tasks in Trusted Extensions
- Trusted Path menuTrusted Extensions Multilevel Desktop
- calendar events at every label
H
- help in Trusted Extensions
- home directories
- visible from higher-level zoneContainers and Labels
- visible from higher-level zone
- hot key
- regaining control of desktop focusHow to Change Your Password in Trusted Extensions
- regaining control of pointerHow to Find the Mouse Pointer
- regaining control of desktop focus
I
- information Seedata
- initialization files
- accessing at every labelHow to Access Initialization Files at Every Label
- troubleshooting when customizedTroubleshoot Login Problems
- accessing at every label
K
- key combinations
- testing if grab is trusted
L
- .link_files file
- described.link_files File
- troubleshootingCreating a .link_files File
- described
- label ranges
- describedSensitivity Labels and Clearances
- troubleshooting a workstation with a restricted rangeTroubleshoot Login Problems
- described
- labels See Alsoclearances
- changing label of data
- changing label on informationExamples of Label Relationships in Trusted Extensions
- componentsSensitivity Labels and Clearances
- determining by window queryHow to Interactively Display a Window Label
- displayed in Trusted ExtensionsLabels on Trusted Extensions Desktops
- displayed on desktopTypical Industry Sensitivity Labels
- dominanceLabels and Transactions
- labeled zonesContainers and Labels
- means of protecting dataTrusted Extensions Separates Information by Label
- relationshipsLabels and Transactions
- sample government labelsLabels and Transactions
- sample industry labelsSensitivity Labels and Clearances
- sample label relationshipsLabels and Transactions
- setting at loginCheck Messages and Select Session Type
- setting clearance at loginSingle-Level or Multilevel Sessions
- setting session labels
- visible on desktopVisible Desktop Security in Trusted Extensions
- linking files at different labels
- by using .link_filesHow to Access Initialization Files at Every Label
- by using .link_files
- logging in
- at a different labelHow to Log In at a Different Label
- choosing a label or clearanceCheck Messages and Select Session Type
- failsafeTroubleshoot Login Problems
- five steps ofTrusted Extensions Login Process
- remotely to multilevel desktopLogging In Remotely to Trusted Extensions
- reviewing security settingsCheck Messages and Select Session Type
- at a different label
- logging out
- procedureHow to Log Out of Trusted Extensions
- user responsibilitiesTrusted Extensions Logout Process
- procedure
- login process Seelogging in
M
- Main Menu
- Shut DownHow to Shut Down Your System
- Shut Down
- man pages in Trusted ExtensionsHow to Access the Trusted Extensions Man
Pages
- mandatory access control (MAC)
- definedMandatory Access Control
- enforced for emailEnforcing MAC for Email Transactions
- defined
- moving
- a window to a workspace at a different labelHow to Move a Window to a Different
Workspace
- a window to a workspace at a different label
- multiheaded system
- multilevel login
- multilevel sessions
N
- no trusted indicator
- troubleshootingTrusted Symbol
- troubleshooting
- no trusted stripe
- troubleshootingWorking on a Labeled System
- troubleshooting
- Not Found error messageAccessing Applications in Trusted Extensions
- Not in Profile error messageAccessing Applications in Trusted Extensions
O
- oper role SeeOperator role
- Operator role
- responsibilitiesAdministration by Role in Trusted Extensions
- responsibilities
P
- passwords
- testing if password prompt is trustedTesting If the Password Prompt Can Be Trusted
- user responsibilitiesPassword Security in the Oracle Solaris OS
- testing if password prompt is trusted
- peripheral devices Seedevices
- permissions
- at discretion of file ownerDiscretionary Access Control
- user responsibilitiesUser Responsibilities for Protecting Data
- at discretion of file owner
- pfexec command Seeprofile shell
- policy Seesecurity policy
- procedures Seeusers
- profile shell
- profiles Seerights profiles
- protecting files
- user responsibilitiesUser Responsibilities for Protecting Data
- user responsibilities
Q
- Query Window Label menu itemHow to Interactively Display a Window Label
R
- read access
- in labeled environmentLabels and Transactions
- in labeled environment
- regaining control of pointerHow to Find the Mouse Pointer
- remote login
- to multilevel desktopLogging In Remotely to Trusted Extensions
- to multilevel desktop
- responsibilities
- of administratorsAdministration by Role in Trusted Extensions
- users for password securityPassword Security in the Oracle Solaris OS
- users to clear mediaErasing Data on Objects Prior to Object Reuse
- users to protect dataUser Responsibilities for Protecting Data
- users when logging outHow to Log Out of Trusted Extensions
- of administrators
- restoring control of pointerHow to Find the Mouse Pointer
- reviewing security settings
- Message Of The Day dialog boxReview Security Attributes During Login
- procedure during loginCheck Messages and Select Session Type
- Message Of The Day dialog box
- rights profiles
- roles
- adding a labeled workspaceHow to Add a Workspace at
Your Minimum Label
- changing workspace labelHow to Change the Label of a Workspace
- common rolesAdministration by Role in Trusted Extensions
- responsibilities ofAdministration by Role in Trusted Extensions
- special user accountTrusted Extensions Enables Secure Administration
- adding a labeled workspace
- root role
- responsibilitiesAdministration by Role in Trusted Extensions
- responsibilities
S
- secadmin role SeeSecurity Administrator role
- Security Administrator role
- contacting about missing trusted indicatorTrusted Symbol
- contacting about missing trusted stripeWorking on a Labeled System
- responsibilitiesAdministration by Role in Trusted Extensions
- contacting about missing trusted indicator
- security policy
- security practices
- definedWhat Is Trusted Extensions?
- defined
- selection
- Selection ManagerHow to Move Data Between
Windows of Different Labels
- sensitivity labels Seelabels
- label typeSensitivity Labels and Clearances
- label type
- session clearances
- sessions
- choosing clearanceSingle-Level or Multilevel Sessions
- effect of selecting levelSession Selection Example
- setting levelCheck Messages and Select Session Type
- single-level or multilevelSingle-Level or Multilevel Sessions
- choosing clearance
- Shut Down menu itemHow to Shut Down Your System
- shutting down a workstationHow to Shut Down Your System
- single-level sessions
- spoofing
- Stop-A (L1-A) keyboard combinationHow to Shut Down Your System
- subject
- Suspend System menu itemHow to Shut Down Your System
- switching to a workspace at a different labelHow to Switch to a Workspace at a Different
Label
- system administration
- on Trusted ExtensionsTrusted Extensions Enables Secure Administration
- on Trusted Extensions
- System Administrator role
- responsibilitiesAdministration by Role in Trusted Extensions
- responsibilities
T
- tasks Seeusers
- troubleshooting
- $HOME/.copy_files fileCreating a .link_files File
- $HOME/.link_files fileCreating a .link_files File
- command line error messagesAccessing Applications in Trusted Extensions
- device allocationHow to Allocate a Device in Trusted Extensions
- File Manager not appearingHow to Allocate a Device in Trusted Extensions
- missing trusted indicatorTrusted Symbol
- missing trusted stripeWorking on a Labeled System
- password failureIdentify and Authenticate Yourself to the System
- $HOME/.copy_files file
- trusted applications
- by using rights profilesAccessing Applications in Trusted Extensions
- by using rights profiles
- trusted computing base (TCB)
- procedures that interact with the TCBPerforming Trusted Actions
- symbol of interacting with
- procedures that interact with the TCB
- Trusted Extensions
- overviewWhat Is Trusted Extensions?
- visible featuresVisible Features of Trusted Extensions
- workspace securityWorkspace Security in Trusted Extensions
- overview
- Trusted GNOME
- customizing the desktopHow to Perform Some Common Desktop Tasks in Trusted Extensions
- customizing the desktop
- trusted grab
- trusted indicator
- missingTrusted Symbol
- missing
- Trusted Path menu
- Allocate DeviceHow to Allocate a Device in Trusted Extensions
- Assume rolename roleHow to Assume a Role in Trusted Extensions
- Change Login PasswordHow to Change Your Password in Trusted Extensions
- Change Workspace LabelHow to Change the Label of a Workspace
- Change Workspace PasswordHow to Change Your Password in Trusted Extensions
- Query Window LabelHow to Interactively Display a Window Label
- Allocate Device
- trusted stripe
- describedTrusted Stripe
- location on desktopTrusted Extensions Multilevel Desktop
- location on screenTypical Industry Sensitivity Labels
- not on lockscreenHow to Lock and Unlock Your Screen
- on multiheaded system
- warping pointer toForcing the Mouse Pointer to the Trusted Stripe
- what to do if missingWorking on a Labeled System
- described
- trusted symbol
- describedTrusted Symbol
- on workspaceVisible Desktop Security in Trusted Extensions
- tamper-proof iconPrograms That Spoof Users Are Prevented
- described
- types of labelsSensitivity Labels and Clearances
U
- unlabeled screens
- lockscreenHow to Lock and Unlock Your Screen
- login screenDesktop Login in Trusted Extensions
- lockscreen
- upgrading informationExamples of Label Relationships in Trusted Extensions
- user clearances
- user responsibilities
- password securityPassword Security in the Oracle Solaris OS
- protecting dataUser Responsibilities for Protecting Data
- when leaving workstationTrusted Extensions Logout Process
- password security
- users
- accessing initialization files at every labelHow to Access Initialization Files at Every Label
- adding a labeled workspaceHow to Add a Workspace at
Your Minimum Label
- allocating a deviceHow to Allocate a Device in Trusted Extensions
- assuming a roleHow to Assume a Role in Trusted Extensions
- authorized to change security level of data
- changing workspace labelHow to Change the Label of a Workspace
- changing your passwordHow to Change Your Password in Trusted Extensions
- determining the label of a fileHow to Determine the Label of a File
- finding pointerHow to Find the Mouse Pointer
- locking your screenHow to Lock and Unlock Your Screen
- logging in at a different labelHow to Log In at a Different Label
- logging outHow to Log Out of Trusted Extensions
- moving a window to a workspace at a different labelHow to Move a Window to a Different
Workspace
- moving data between labels
- responsibilities
- clearing devicesErasing Data on Objects Prior to Object Reuse
- password securityPassword Security in the Oracle Solaris OS
- protecting dataUser Responsibilities for Protecting Data
- when leaving workstationHow to Log Out of Trusted Extensions
- clearing devices
- shutting down a workstationHow to Shut Down Your System
- switching to a workspace at a different labelHow to Switch to a Workspace at a Different
Label
- unlocking your screenHow to Lock and Unlock Your Screen
- viewing files in a workspaceHow to View Your Files in a Labeled Workspace
- accessing initialization files at every label
- using a device Seeallocating a device
V
- visibility
- desktop securityVisible Desktop Security in Trusted Extensions
- labels after loginDesktop Login in Trusted Extensions
- reading lower-level home directoriesContainers and Labels
- desktop security
W
- Window Label indicatorWindow Label Indicator
- Workspace Menu
- Suspend SystemHow to Shut Down Your System
- Suspend System
- workspaces
- labeledLabeled Workspaces
- setting default labelHow to Log In at a Different Label
- labeled
- write access
- in labeled environmentLabels and Transactions
- in labeled environment
Z
- zones
- home directory visibilityContainers and Labels
- labeledContainers and Labels
- home directory visibility