Labels

Trusted Solaris 7 does not configure labels during installation (see "Installation and Configuration", documents how to create many compartments in labels, and does not support information labels.

Large Numbers of Compartments

"Bits Available for Classification and Compartment Components" in Trusted Solaris Label Administration documents how to create and manage large numbers of compartments in a label_encodings file.

Information Labels

Information labels (ILs) are not supported in Trusted Solaris 7 and later releases. Trusted Solaris software interprets any ILs on communications and files from systems running earlier releases as ADMIN_LOW.

Objects still have CMW labels, and CMW labels still include the IL component: IL[SL]; however, the IL component is fixed at ADMIN_LOW.

As a result, Trusted Solaris 7 has the following characteristics:

• ILs do not display in window labels; SLs (Sensitivity Labels) display alone within brackets.

• ILs do not float.

• Setting an IL on an object has no effect, and getting an object's IL will always return ADMIN_LOW.

• Although certain utilities, library functions, and system calls can manipulate IL strings, the resulting ILs cannot be set on any objects.

• Sensitivity labels, not information labels, display on printer banners and body pages.

• Options related to information labels in the label_encodings(4) file can be ignored.

• IL-related privileges are no longer used. See "Authorization and Privilege Differences" for a list.

• In auditing, the ilabel token is recorded as ADMIN_LOW, when it is recorded. The audit event numbers 519 (AUE_OFLOAT), 520 (AUE_SFLOAT), and 9036 (AUE_iil_change) continue to be reserved, but those events are no longer recorded.