File Systems and Mounting

The Trusted Solaris 7 implementation of file system security attributes is similar to the Solaris 7 implementation instead of the Trusted Solaris 2.5.1 implementation. Instead of attributes stored on a filesystem inode, the operating system manages the filesystem security attributes. The new implementation has consequences for Trusted Solaris 7 administrators:

Mount-time security attributes may be specified either by using the mount(1M) command with the -S option on the command line or by specifying the attributes in the vfstab_adjunct file. Mount-time security attributes override existing security attributes on a file system. However, they never override security attributes on the files and directories within the file system. When access-control decisions are made, security attributes on a file or directory take precedence over security attributes specified either at the filesystem level or at mount time.

• Filesystem security attributes are not assigned using the tsol_attr flag; the flag has been removed.