A
- access See
computer access- remote systemsRemote Administration in Trusted Extensions
- remote systems
- access policy
- devicesDevice Access Policies
- Discretionary Access Control (DAC)
- Mandatory Access Control (MAC)Differences Between Trusted Extensions and the Oracle Solaris OS
- devices
- accessing
- administrative toolsGetting Started as a Trusted Extensions Administrator on a Desktop System
- audit records by labelAudit Tasks in Trusted Extensions
- home directoriesZones in Trusted Extensions
- labeled zones by usersHow to Enable Users to Log In to a Labeled
Zone
- printersLabels, Printers, and Printing
- remote multilevel desktopHow to Configure a Trusted Extensions System With Xvnc for Remote Access
- ZFS dataset mounted in lower-level zone from higher-level zoneSharing and Mounting a ZFS Dataset From Labeled Zones
- administrative tools
- account locking
- preventing for users who can assume rolesHow to Prevent Account Locking
for Users
- preventing for users who can assume roles
- accounts
- accreditation checksTrusted Extensions Accreditation Checks
- accreditation ranges
- label_encodings fileLabel Encodings File
- label_encodings file
- adding
- LDAP role with roleaddCreating the Security Administrator Role in LDAP
- local role with roleaddHow to Create the Security Administrator
Role in Trusted Extensions
- local user with useraddUsing the useradd Command to Create a Local User
- logical interfacesHow to Add an IP Instance to a Labeled Zone
- multilevel datasetHow to Create and Share a Multilevel Dataset
- network databases to LDAP serverPopulate the Oracle Directory Server Enterprise Edition
- nscd daemon to every labeled zoneHow to Configure a Separate Name Service for
Each Labeled Zone
- remote host templatesCreating Security Templates
- secondary zonesHow to Create a Secondary Labeled Zone
- shared network interfacesHow to Share a Single IP Address With All Zones
- Trusted Extensions packagesAdd Trusted Extensions Packages to an Oracle Solaris System
- users who can assume rolesHow to Create Users Who Can Assume Roles in Trusted Extensions
- VNIC interfacesHow to Add a Virtual Network Interface to a
Labeled Zone
- zone-specific nscd daemonHow to Configure a Separate Name Service for
Each Labeled Zone
- LDAP role with roleadd
- Additional Trusted Extensions Configuration TasksAdditional Trusted Extensions Configuration Tasks
- ADMIN_HIGH label
- body page labels andHow to Configure a Zone as a Single-Level
Print Server
- global zone processes and zonesGlobal Zone Processes and Labeled
Zones
- multilevel datasets andNo Privilege Overrides for MAC Read-Write
Policy
- NFS-mounted files in global zoneTrusted Extensions Policy for Single-Level
Datasets
- no localizationFor International Customers of Trusted Extensions
- role clearanceHow to Create a System Administrator
Role
- roles andRole Creation in Trusted Extensions
- top administrative labelAdministrative Labels
- body page labels and
- ADMIN_LOW label
- limitations on unlabeled system mountsSharing and Mounting Files
in the Global Zone
- lowest labelAdministrative Labels
- mounting files andSharing and Mounting Files
in the Global Zone
- protecting administrative filesPassword Protection
- limitations on unlabeled system mounts
- administering
- account lockingHow to Prevent Account Locking
for Users
- assigning device authorizationsHow to Assign Device Authorizations
- auditing in Trusted ExtensionsAudit Management by Role in Trusted Extensions
- changing label of informationHow to Enable a User to Change the Security
Level of Data
- convenient authorizations for usersHow to Create a Rights Profile for Convenient Authorizations
- device allocationHow to Assign Device Authorizations
- device authorizationsHow to Create New Device Authorizations
- file systems
- troubleshootingHow to Troubleshoot Mount Failures in Trusted Extensions
- troubleshooting
- files
- backing up with labelsHow to Back Up Files in Trusted Extensions
- restoring with labelsHow to Restore Files in Trusted Extensions
- backing up with labels
- from the global zoneHow to Enter the Global Zone in Trusted Extensions
- labeled IPsecConfiguring Labeled IPsec
- labeled printingManaging Labeled Printing
- multilevel datasetsResults of Sharing and Mounting File Systems in Trusted Extensions
- multilevel portsDisplaying Multilevel Ports on a System
- quick reference for administratorsQuick Reference to Trusted Extensions Administration
- remote host templatesCreating Security Templates
- routes with security attributesHow to Add Default Routes
- security templates
- sharing file systemsHow to Share File Systems From a Labeled Zone
- startup files for usersHow to Configure Startup Files for Users
in Trusted Extensions
- system filesHow to Change Security Defaults in System
Files
- third-party softwareSoftware Management in Trusted Extensions
- trusted networkManaging Networks in Trusted Extensions
- unlabeled printingReducing Printing Restrictions in Trusted Extensions
- user privilegesHow to Restrict a User's Set of
Privileges
- users
- zonesManaging Zones
- zones by using txzonemgrZone Administration Utilities in Trusted Extensions
- account locking
- administrative labelsAdministrative Labels
- administrative roles Seeroles
- administrative tools
- configuration filesConfiguration Files in Trusted Extensions
- descriptionTrusted Extensions Administration Tools
- Device ManagerDevice Manager
- label builderLabel Builder in Trusted Extensions
- Labeled Zone Managertxzonemgr Script
- Selection ManagerSelection Manager in Trusted Extensions
- txzonemgr scripttxzonemgr Script
- configuration files
- Allocate Device authorization
- allocate error state
- allocating
- using Device ManagerDevice Manager GUI
- using Device Manager
- allocating devices
- for copying dataHow to Copy Files to Portable Media in Trusted Extensions
- for copying data
- application security labelLabels for IPsec-Protected Exchanges
- applications
- enabling initial network contact between client and serverMaking the Host Address 0.0.0.0/32 a Valid Initial Address
- evaluating for securitySecurity Administrator Responsibilities for
Trusted Programs
- trusted and trustworthyEvaluating Software for Security
- enabling initial network contact between client and server
- ARMOR roles
- assigning
- privileges to usersSecurity Attribute Assignment to Users
in Trusted Extensions
- rights profilesSecurity Attribute Assignment to Users
in Trusted Extensions
- privileges to users
- Assume Role menu itemHow to Enter the Global Zone in Trusted Extensions
- assuming
- atohexlabel commandHow to Obtain the Hexadecimal Equivalent
for a Label
- audio devices
- preventing remote allocationPreventing Remote Allocation of the Audio Device
- preventing remote allocation
- Audit Review profile
- reviewing audit recordsAudit Tasks in Trusted Extensions
- reviewing audit records
- audit tokens for Trusted Extensions
- label tokenlabel Token
- xatom tokenxatom Token
- xcolormap tokenxcolormap Token
- xcursor tokenxcursor Token
- xfont tokenxfont Token
- xgc tokenxgc Token
- xpixmap tokenxpixmap Token
- xproperty tokenxproperty Token
- xselect tokenxselect Token
- xwindow tokenxwindow Token
- label token
- auditing in Trusted Extensions
- additional audit eventsTrusted Extensions Audit Events
- additional audit policiesTrusted Extensions Audit Policy Options
- additional audit tokensTrusted Extensions Audit Tokens
- additions to existing auditing commandsExtensions to Auditing Commands in Trusted Extensions
- differences from Oracle Solaris auditingAuditing in Trusted Extensions
- referenceTrusted Extensions and Auditing
- roles for administeringAudit Management by Role in Trusted Extensions
- X audit classesTrusted Extensions Audit Classes
- additional audit events
- authorizations
- adding new device authorizationsHow to Create New Device Authorizations
- Allocate Device
- assigning device authorizationsHow to Assign Device Authorizations
- authorizing a user or role to change labelHow to Enable a User to Change the Security
Level of Data
- Configure Device AttributesHow to Assign Device Authorizations
- convenient for usersHow to Create a Rights Profile for Convenient Authorizations
- creating customized device authorizationsCreating Fine-Grained Device Authorizations
- creating local and remote device authorizationsCreating and Assigning Trusted Path and Non-Trusted Path Device Authorizations
- customizing for devicesHow to Add Site-Specific Authorizations to
a Device in Trusted Extensions
- profiles that include device allocation authorizationsHow to Assign Device Authorizations
- Revoke or Reclaim Device
- adding new device authorizations
- authorizing
- device allocationHow to Assign Device Authorizations
- unlabeled printingReducing Printing Restrictions in Trusted Extensions
- device allocation