Index

Symbols  Numerics  A  B  C  D  E  F  G  H  I  K  L  M  N  O  P  Q  R  S  T  U  V  W  Z  

---

Symbols

• /etc/vfstab file 1.7.1
• . (dot)
  • displaying hidden files 1.6.2
• - (minus sign)
  • file permissions symbol 1.2.6
  • file type symbol 1.2.2
• + (plus sign)
  • file permissions symbol 1.2.6
• = (equal sign)
  • file permissions symbol 1.2.6

---

Numerics

• 32-bit executables
  • protecting from compromising security 1.5

---

A

• absolute mode
  • changing file permissions 1.2.6, 1.6.6
  • changing special file permissions 1.6.7
  • description 1.2.6
  • setting special permissions 1.2.6
• access
  • restricting by label 3.1, 3.5
  • security
    • UFS ACLs 1.4
    • ZFS file attributes 1.3
  • user clearance to labeled files 3.1.4
• Access Control Lists (ACLs) 1.3
• accessing
  • hardened zones 3.3
  • labeled file systems 3.1.4
  • labeled NFS mounts 3.1.4.1
  • processes whose label you dominate 3.2
• account-policy SMF stencil 1.2.5, 3.6.2.2
• ACL
  • description 1.3, 1.4
  • format of entries 1.4
• aclinherit property 2.1.4
• ACLs
  • access privileges 2.1.2
  • ACL inheritance 2.1.3, 2.3
  • aclinherit property 2.1.4
  • description 2.1
  • description of entries 2.1.2
  • entry types 2.1.2
  • formats 2.1.1
  • interaction with permission bits 2.2.3
  • rights required for chmod 2.3
  • rights required to change 2.2.3
  • setting on ZFS files
    • compact output 2.2.1.1
    • description 2.2
    • verbose mode 2.2.1
    • verbose output 2.2.1.1
  • trivial ACLs on ZFS files
    • modifying 2.2.2
• ADMIN_HIGH label 3.1.1
• ADMIN_LOW label 3.1.1
• administering
  • file permissions 1.6, 1.6.1
  • labeled file systems 3.8
• administrators
  • labeling sensitive data 3.6.1
• appendonly ZFS file attribute 1.3
• archiving
  • labeled files 3.1.4, 3.8
  • labeled file systems 3.1.4, 3.8
• assigning
  • clearances
    • in policy.conf file 3.6.2.2
    • to SMF services 3.6.2.2
    • to specific users 3.6.2.3
  • labels to file systems 3.6.2.3
  • minimum label 3.6.2.2
  • user clearance 3.6.2.2
• attributes
  • keyword in BART 4.2.2
• audit files
  • labeled 3.5, 3.7.3
• auditing
  • labeled file systems 3.1.4, 3.6.2.3, 3.7.3
• authorizations
  • solaris.admin.edit/etc/vfstab 1.7.1

---

B

• backing up
  • labeled files 3.8
• BART
  • components 4.1.2
  • overview 4.1
  • programmatic output 4.3.3.1
  • security considerations 4.2.1
  • task map 4.2
  • verbose output 4.3.3.1
• bart create command 4.1.2.1, 4.2.2
• Basic Audit Reporting Tool 4.1

---

C

• canmount=off
  • labeled NFS mounts 3.1.4.1
• changing
  • directory permissions across symbolic links 1.6.8
  • file label 3.1.4
  • file ownership 1.6.3
  • file permissions
    • absolute mode 1.6.6
    • special 1.6.7
    • symbolic mode 1.6.5
  • file permissions across symbolic links 1.6.8
  • group ownership of file 1.6.4
  • permissions across symbolic links 1.6.8
  • special file permissions 1.6.7
• chgrp command
  • description 1.2.1
  • syntax 1.6.4
• chmod command
  • changing special permissions 1.6.7
  • description 1.2.1
  • preventing mode change across symbolic links 1.6.8
  • rights required 2.2.3
  • setting ACL inheritance 2.3
  • syntax 1.6.7, 1.6.8
• chown command
  • description 1.2.1
  • rights required 2.2.3
• CIFS
  • file attributes for security 1.3
• classifications
  • defined 3.1.2.1
  • described 3.1.2
  • displaying 3.2.2
  • label relationships 3.1.2.2
  • naming 3.1.2.1
  • numbers of 3.1.2.1
• clearances
  • access to labeled file systems 3.1.4
  • and labels 3.1.2
  • assigning
    • to SMF services 3.6.2.2
    • to specific users 3.6.2.3
  • configuring default 3.6.2.2
  • current process and 3.2.2
  • displaying 3.2.2
  • process labels 3.1.2
• clearance value
  • encodings file 3.6.2.2
• commands
  • file protection commands 1.2.1
• compact output display of ACL information 2.2.1.1
• compartment bits 3.1.2.1
• compartments
  • defined 3.1.2.1
  • described 3.1.2
  • disjoint example 3.10
  • label relationships 3.1.2.2
  • naming 3.1.2.1
  • overlapping 3.1.2.2
  • properties 3.10
  • re-using bits 3.10
• compliance encodings file
  • disjoint labels 3.9.2
  • testing 3.9.2
• components
  • BART 4.1.2
  • labels, of 3.1.2.1
• configuring
  • auditing of labeled file systems 3.6.2.3
  • default clearance 3.6.2.2
  • hardened labeled file systems 3.7
  • immutable zone 3.7.1
  • labeled file systems 3.6.2.3
  • labeled zones 3.6.1
  • label policy 3.6.2.2
  • labels 3.1, 3.6, 3.6.1
• conflicts compartment property 3.10
• control manifests (BART) 4.1
• core files
  • labeled 3.5
• creating
  • encodings file 3.6.2.2
  • labeled audit trail 3.7.3
  • label policy 3.6.2.2, 3.10
• customized label policy 3.2.3
• customized labels
  • installing as a package 3.4
• customizing
  • BART manifests 4.2.3
  • BART reports 4.2.7
  • label policy 3.2.3, 3.4

---

D

• data
  • identifying for labeling 3.2.3
  • labeling sensitive data 3.6.1
• databases
  • labeling $ORACLE_HOME directory 3.5
• default encodings file
  • testing 3.9.1
• default label policy 3.2.1
• defaults
  • umask value 1.2.5
• defining
  • labels and label policy 3.6.2.2
• directories 1.2
  • changing permissions across symbolic links 1.6.8
  • displaying files and related information 1.2.1, 1.6.2
  • labeled 3.5
  • permissions
    • defaults 1.2.5
    • description 1.2.3
  • public directories 1.2.4.3
• disabling
  • 32-bit executables that compromise security 1.5
• disjoint labels
  • compliance encodings file and 3.9.2
  • defined 3.1.2.2
  • re-using compartment bits 3.10
• displaying
  • ACL information in compact format 2.2.1.1
  • ACL information in verbose format 2.2.1.1
  • classification levels 3.2.2
  • clearance 3.2.2
  • compliance label policy 3.9.2
  • encodings files 3.9
  • file information 1.6.2
  • file permissions 1.6.2
  • files and related information 1.2.1
  • label list 3.9.1
  • label policy details 3.2.2, 3.10
  • list of labels 3.2.2
  • upper bound of labels 3.6.2.3
• dot (.)
  • displaying hidden files 1.6.2
• downgrading
  • file label 3.1.4
• DTrace probes
  • labeled 3.5

---

E

• encodings file
  • clearance value 3.2.2
  • label policy 3.2.2
  • labels 3.1.1
• encodings files
  • compliance 3.9.2
  • creating 3.6.2.2
  • default 3.9.1
  • installing customized 3.4
  • testing 3.9
  • viewing contents 3.9
• equal sign (=)
  • file permissions symbol 1.2.6
• executable stacks
  • protecting against 32-bit processes 1.5
• execute permissions
  • symbolic mode 1.2.6

---

F

• file_labeling package 3.2.1, 3.6.2.1
• file attributes
  • CIFS security 1.3
  • ZFS security 1.3
• file permission modes
  • absolute mode 1.2.6
  • symbolic mode 1.2.6
• files
  • /etc/vfstab 1.7.1
  • assigning label to 3.6.2.3
  • BART manifests 4.3.1
  • changing group ownership 1.6.4
  • changing ownership 1.2.1, 1.6.3
  • changing permissions across symbolic links 1.6.8
  • changing special file permissions 1.6.7
  • configuring as labeled 3.6.2.3
  • displaying file information 1.6.2
  • displaying hidden files 1.6.2
  • displaying information about 1.2.1
  • file types 1.2.2
  • finding files with setuidpermissions 1.6.10
  • manifests (BART) 4.3.1
  • ownership
    • and setgid permission 1.2.4.2
    • and setuid permission 1.2.4.1
  • permissions
    • absolute mode 1.2.6, 1.6.6
    • changing 1.2.1, 1.2.6, 1.6.5
    • defaults 1.2.5
    • description 1.2.3
    • setgid 1.2.4.2
    • setuid 1.2.4.1
    • sticky bit 1.2.4.3
    • symbolic mode 1.2.6, 1.6.5
    • umask value 1.2.5
  • protecting with UNIX permissions 1.6.1
  • recursively changing permissions 1.6.8
  • security
    • changing ownership 1.6.3
    • changing permissions 1.2.6, 1.6.5
    • directory permissions 1.2.3
    • displaying file information 1.2.1, 1.6.2
    • file permissions 1.2.3
    • special file permissions 1.2.6
    • umask default 1.2.5
    • UNIX permissions 1.2
    • user classes 1.2.2
  • special files 1.2.4
  • symbols of file type 1.2.2
• file system
  • setting
    • ACL inheritance on ZFS files (verbose mode) 2.3
    • ACLs on ZFS files 2.2, 2.2.1, 2.2.1.1
  • trivial ACL on ZFS files
    • modifying 2.2.2
• file systems
  • access to labeled NFS mounts 3.1.4.1
  • assigning labels to 3.6.2.3
  • configuring as labeled 3.6.2.3
  • explicitly labeled 3.1.4
  • labeled audit trail 3.7.3
  • labeled NFS mounts 3.1.4.1
  • labeled shares 3.1.4.1
  • multilevel 3.1.4
  • no override for access by label 3.1.4
  • tmpfs 1.7
  • TMPFS security 1.2.4.3
• find command
  • finding files with setuidpermissions 1.6.10
• finding
  • files of specified label 3.6.2.3
  • files with setuid permissions 1.6.10
• fixed configuration
  • labeled file systems and 3.7.1

---

G

• groups
  • changing file ownership 1.6.4

---

H

• hardening
  • labeled file systems 3.3
  • labeled zones 3.7.2
  • removing network interfaces 3.3
  • zones 3.3
• hardening labeled file systems
  • procedures 3.7
• hierarchical labels 3.1.2.2
• hierarchy
  • labels, of 3.1.2.1

---

I

• identifying
  • sensitive data 3.2.3
  • sensitive services 3.2.3
• immutable global zone
  • labeled file systems and 3.7.1
• immutable ZFS file attribute 1.3
• immutable zones
  • hardening configuration 3.3
  • labeled file systems and 3.5
• installing
  • customized encodings file 3.4
  • customized labels 3.4
  • encodings file 3.4
  • file_labeling package 3.6.2.1
  • label package 3.6.2.1
  • labels 3.4, 3.6.2.1
• internal representation
  • labels, of 3.1.3

---

K

• keywords
  • attribute in BART 4.2.2

---

L

• label aliases 3.1.2.2
• labelcfg command 3.6.2.2
  • displaying label policy 3.2.2
• labelcfg -e command
  • installing encodings file 3.4
• label configuration steps
  • additional 3.3
• labeld:clearance service 3.1.1
• label dominance
  • described 3.1.2
• labeled files
  • configuring 3.6.2.3
• labeled file systems
  • archiving 3.1.4
  • auditing 3.1.4, 3.7.3
  • configuring 3.6.2.3
  • fixed configuration 3.7.1
  • hardening 3.7
  • immutable global zone and 3.7.1
  • isolating in a zone 3.7.2
  • maintaining 3.8
  • sharing 3.6.2.3
  • zones and 3.7.2
• label policy
  • compliance version 3.9.2
  • configuring 3.6.2.2
  • creating 3.6.2.2, 3.10
  • customized 3.2.3
  • default 3.2.1
  • described 3.1.1
  • displaying 3.2.2
  • encodings file 3.2.2
  • labelcfg command 3.2.2
  • levels 3.2.2
  • other security measures, and 3.2.3
  • planning 3.2, 3.2.3
  • protecting sensitive data 3.2
  • testing 3.9.1
• labels
  • ADMIN_HIGH 3.1.1
  • ADMIN_LOW 3.1.1
  • archiving labeled files 3.8
  • assigning to file systems 3.6.2.3
  • audit files and 3.5
  • audit trail 3.7.3
  • backing up labeled files 3.8
  • classification numbers and compartment bits 3.1.2.1
  • components 3.1.2.1
  • configuration steps 3.6.1
  • configuring in Oracle Solaris 3.6
  • core files and 3.5
  • creating 3.6.2.2
  • database data and 3.5
  • data loss protection and 3.5
  • defined 3.1.1
  • detailed listing 3.9.2
  • directories and 3.5
  • displaying default policy 3.2.2
  • dominance 3.1.2.2
  • dominance and translation 3.1.3
  • domination 3.1.2
  • DTrace probes and 3.5
  • encodings file 3.6.2.2
  • files, on 3.1.4
  • file systems 3.6.2.3
  • finding files of specified label 3.6.2.3
  • hardening configuration 3.3
  • hierarchy 3.1.2.1
  • how they work 3.1
  • immutable configuration and 3.5
  • initial setup 3.2, 3.6.2.1
  • installing 3.6.2.1
  • internal representation 3.1.3
  • level of trust 3.1.2.1
  • listing 3.9
  • logins and 3.1.2
  • lower bound 3.1.1
  • man pages quick reference 3.11
  • NFS-mounted file systems 3.6.2.3
  • NFS mounts, on 3.1.4.1
  • overview 3.1
  • pkg:/system/file_labeling 3.2.1
  • planning 3.2
  • policy 3.1.1, 3.2
  • protecting sensitive data 3.2
  • relationships 3.1.2.2
  • sample definitions 3.1.2.1
  • sandbox environment 3.1.2
  • sensitive data 3.6.1
  • shared file systems, on 3.1.4.1
  • testing 3.6.2.2
  • textual strings 3.1.3
  • transferring labeled files 3.8
  • translating between representations 3.1.3
  • upper bound 3.1.1, 3.1.2
  • ZFS dataset and 3.6.2.3
• labels package
  • installing 3.6.2.1
  • installing customized 3.4
• level of trust
  • labels 3.1.2.1
• log files
  • BART
    • programmatic output 4.3.3.1
    • verbose output 4.3.3.1
• logins
  • labels and 3.1.2
• lower bound of labels 3.1.1

---

M

• maintaining
  • labeled file systems 3.8
• Maintenance and Repair rights profile 1.7.1
• managing
  • file permissions 1.6
• manifests 4.1.2.1
  • control 4.1
  • customizing 4.2.3
  • file format 4.3.1
  • test in BART 4.1.2.2
• man pages
  • quick reference for label administrators 3.11
• min_label value
  • displaying 3.2.2
  • encodings file 3.6.2.2
  • planning 3.6.2.2
• minus sign (-)
  • file permissions symbol 1.2.6
  • symbol of file type 1.2.2
• monitoring
  • memory usage 1.7.1

---

N

• naming
  • classifications and compartments 3.1.2.1
• network interfaces
  • removing to prevent leakage 3.3
• new features
  • in this release 1.1
• NFS-mounted file systems
  • setting label 3.6.2.3
  • verifying label 3.6.2.3
• NFSv4 ACLs
  • description 2.1.2
  • inheritance 2.1.3
  • model 2.1
  • property 2.1.4
• nounlink ZFS file attribute 1.3

---

O

• Object Access Management rights profile
  • ACLs and 2.2.3
• Object Label Management rights profile 3.1.1
• overlapping compartments 3.1.2.2
• ownership of files
  • changing 1.2.1, 1.6.3
  • changing group ownership 1.6.4
  • UFS ACLs and 1.4
  • ZFS ACLs and 1.3

---

P

• packages
  • installing customized labels 3.4
• permissions
  • changing file permissions
    • absolute mode 1.2.6, 1.6.6
    • chmod command 1.2.1
    • symbolic mode 1.2.6, 1.6.5
  • defaults 1.2.5
  • directory permissions 1.2.3
  • file permissions
    • absolute mode 1.2.6, 1.6.6
    • changing 1.2.6, 1.6.5
    • description 1.2.3
    • special permissions 1.2.4.3, 1.2.6
    • symbolic mode 1.2.6, 1.6.5
  • finding files with setuidpermissions 1.6.10
  • setgid permissions
    • absolute mode 1.2.6, 1.6.7
    • description 1.2.4.2
    • symbolic mode 1.2.6
  • setuid permissions
    • absolute mode 1.2.6, 1.6.7
    • description 1.2.4.1
    • security risks 1.2.4.1
    • symbolic mode 1.2.6
  • special file permissions 1.2.4, 1.2.4.3, 1.2.6
  • sticky bit 1.2.4.3
  • UFS ACLs and 1.4
  • umask value 1.2.5
  • user classes and 1.2.2
  • ZFS file attributes and 1.3
• pkg:/system/file_labeling package 3.2.1, 3.6.2.1
• planning
  • data loss protection 3.2
  • labeling sensitive data 3.2
  • label policy 3.2.3
• plus sign (+)
  • file permissions symbol 1.2.6
• preventing
  • data leakage 3.3
  • labeled mount failures 3.1.4.1
  • programs from compromising system 1.6.9
  • tmpfs filling up 1.7
• privileges
  • changing labels 3.1.3
  • no override for access by label 3.1.4
• process clearances 3.1.2
• protecting
  • 32-bit executables from compromising security 1.5
  • system from risky programs 1.6.9
• protecting files
  • user procedures 1.6.1
  • with UFS ACLs 1.4
  • with UNIX permissions 1.2, 1.6.1
  • ZFS file attributes and 1.3
• protecting sensitive data
  • with labels 3.2
• public directories
  • sticky bit and 1.2.4.3

---

Q

• quoting syntax in BART 4.3.2.2

---

R

• readonly CIFS file attribute 1.3
• read permissions
  • symbolic mode 1.2.6
• recursive changing of permissions 1.6.8
• relationships between labels 3.1.2.2
• reporting tool 4.1.2.2
• reports (BART) 4.1
• restricting
  • access to hardened zones 3.3
  • access to labeled data 3.2
  • size of tmpfs file system 1.7.1
• rights profiles
  • changing ACLs 2.2.3
  • Maintenance and Repair 1.7.1
  • Object Label Management 3.1.1
• rstchown system variable 1.6.3
• rules file (BART) 4.1.2.3
• rules file attributes 4.3.2.1
• rules file format (BART) 4.3.2
• rules file specification language 4.3.2.2

---

S

• sample encodings files
  • viewing and testing 3.9
• sandbox
  • labels and 3.1.2
• security
  • BART considerations 4.2.1
  • protecting systems from risky programs 1.6.9
  • ZFS file attributes 1.3
• sensitive ZFS file attribute 1.3
• services
  • identifying for labeling 3.2.3
• setgid permissions
  • absolute mode 1.2.6, 1.6.7
  • description 1.2.4.2
  • security risks 1.2.4.2
  • symbolic mode 1.2.6
• setting
  • ACL inheritance 2.3
  • ACLs on ZFS files
    • compact output 2.2.1.1
    • description 2.2
    • verbose mode 2.2.1
    • verbose output 2.2.1.1
• setuid permissions
  • absolute mode 1.2.6, 1.6.7
  • description 1.2.4.1
  • finding files with permissions set 1.6.10
  • security risks 1.2.4.1
  • symbolic mode 1.2.6
• shared file systems
  • labeled 3.1.4.1
• sharing
  • labeled file systems 3.6.2.3
• solaris.admin.edit/etc/vfstabauthorization 1.7.1
• Solaris ACLs 2.1, 2.1.3, 2.1.4
• special permissions
  • setgid permissions 1.2.4.2
  • setuid permissions 1.2.4.1
  • sticky bit 1.2.4.3
• sticky bit permissions
  • absolute mode 1.2.6, 1.6.7
  • description 1.2.4.3
  • symbolic mode 1.2.6
• subcompartments compartment property 3.10
• symbolic links
  • changing permissions on targets of 1.6.8
  • file permissions 1.2.3
• symbolic mode
  • changing file permissions 1.2.6, 1.6.5
  • description 1.2.6
• sys_trans_label privilege 3.1.3
• system configuration
  • enforcing fixed 3.7.1
  • labels and immutable configuration 3.5
• systems
  • protecting from risky programs 1.6.9
• system security
  • protecting from risky programs 1.6.9
  • UFS ACLs 1.4
  • ZFS file attributes 1.3
• system variables
  • rstchown 1.6.3

---

T

• task maps
  • Using BART task map 4.2
• testing
  • compliance encodings file 3.9.2
  • default encodings file 3.9.1
  • encodings files 3.9
• test manifests
  • BART 4.1.2.2
• textual representation
  • labels, of 3.1.3
• tmpfs file system
  • limiting size 1.7.1
  • on files 1.7
  • security 1.2.4.3
• transferring
  • labeled files 3.8
  • labeled file systems 3.8
• translating
  • between label representations 3.1.3
• trivial ACLs 2.2.2
• troubleshooting
  • finding files with setuid permissions 1.6.10

---

U

• umask value
  • and file creation 1.2.5
  • typical values 1.2.5
• UNIX file permissions 1.2
• upgrading
  • file label 3.1.4
• upper bound of labels
  • defined 3.1.1
  • viewing 3.6.2.3
• user classes of files 1.2.2
• user clearance
  • displaying initial 3.2.2
• user clearances 3.1.2
• user procedures
  • protecting files 1.6.1
• users
  • clearances 3.1.2, 3.6.2.2
  • restricting access to labeled data 3.2
• using
  • BART 4.2.1
  • file permissions 1.6

---

V

• variables
  • rstchown 1.6.3
• verbose output display of ACL information 2.2.1.1
• verifying
  • clearance on commands 3.7.3
  • labeld:clearance serviceenabled 3.6.2.1
  • label policy 3.6.2.3
  • labels on file system 3.6.2.3

---

W

• write permissions
  • symbolic mode 1.2.6

---

Z

• ZFS datasets
  • labeled files and 3.1.4
  • labeled file systems and 3.6.2.3
• ZFS file attributes 1.3
• ZFS File System Management rights profile
  • ACLs and 2.2.3
• zfs set command
  • rights required 2.2.3
• zones
  • hardening 3.3
  • labeled file systems and 3.5, 3.7.2