trusted_extensions - Solaris Trusted Extensions
The Trusted Extensions feature of Oracle Solaris provides labels for local objects and processes, for the desktop and windowing system, for zones and file systems, and for network communications. These labels are used to implement a Multilevel Security (MLS) policy that restricts the flow of information based on label relationships. In contrast to Discretionary Access Control (DAC) based on ownership, the MLS policy enforced by Trusted Extensions is an example of Mandatory Access Control (MAC).
By default, Trusted Extensions software is disabled. It is enabled and disabled (but not completely configured) by the labeladm(1M) command, and is associated with labeld(1M) services, identified by the FMRI pattern:
svc:/system/labeld:*
Refer to the Administrator's Guide listed below for the required configuration of Trusted Extensions software necessary before use.
labeld(1M), label_encodings(4), labels (5), labeladm(1M)
Trusted Extensions Configuration and Administration
Trusted Extensions User’s Guide