Index

A

access control
by label range
example
access decisions, using labels
access-related words, defined
accounts
label range example
label range overview
session range
ACCREDITATION RANGE keyword
ACCREDITATION RANGE section
described
example
accreditation ranges
overview
system
user
ADMIN_HIGH label
classification value
illustrating numerical value
ADMIN_LOW label
classification value
illustrating numerical value
administrative labels
configuring appearance
in system accreditation range
specifying name visibility
aname= classification keyword
areas of interest, represented by compartment
authorizations
Downgrade File Label
Print PostScript File
Print Without Labels
Upgrade File Label

B

banner pages
appearance
computing the classification
customizing
internationalizing
labeling
body pages
appearance
labels

C

caveats, handling instructions
channels
prefixes and suffixes
strings on banner and trailer pages
worksheet example
CHANNELS keyword
CHANNELS section
described
example
CIPSO labels
illustration of
numerical values
troubleshooting
warning in label_encodings file
classifications
changing column header in label builder
dominance
example of analyzing
keywords
maximum number
numerical values
planning example
rules for printing
specifying colors
syntax
CLASSIFICATIONS section
described
example
clearances
account label range
type of label
worksheet example
CLEARANCES keyword
CLEARANCES section
described
example
COLOR NAMES section
color planner
describing
example
colors
assigning
finding color values
rules of use for labels
specifying for labels
values
worksheet example
column headers, changing in label builder
combination constraints
defined
example
COMBINATION CONSTRAINTS keyword
combination rules, combination constraints
Common IP Security Option (CIPSO), CIPSO labels
comparing
GFI files
label_encodings files
labels
compartments
changing column header in label builder
default and inverse words
example of words
numerical values
planning example
setting up hierarchies
words
worksheet example
CONFIDENTIAL: INTERNAL_USE_ONLY label, requirements
CONFIDENTIAL: NEED_TO_KNOW label
groups that use
requirements
CONFIDENTIAL: REGISTERED label
adding DAC protections
requirements
Configuring Security Text on Print Jobs (Task Map)
customizing
banner pages
color assignments
color assignments to labels
handling instructions on printer output
label appearance
security text on printer output

D

debugging, label_encodings file
default words, defined
Defense Intelligence Agency (DIA), label_encodings reference
demonstration files
label_encodings.example file
label_encodings.multi file
label_encodings samples
dominance
Downgrade File Label authorization

E

encodings file, label_encodings file
/etc/security/tsol directory
examples
ACCREDITATION RANGE section
CHANNELS section
CLASSIFICATIONS section
CLEARANCES section
COLOR NAMES section
column headers in label builder
label_encodings file
labels planning
LOCAL DEFINITIONS section
MAC decision
PRINTER BANNERS section
SENSITIVITY LABELS section

F

files
label_encodings.example
label_encodings.simple
label_encodings versions
/usr/lib/lp/postscript/tsol_separator.ps
/usr/openwin/lib/rgb.txt

G

GFI files
comparing
in /etc/security/tsol directory

H

handling instructions
printer banners
specifying

I

INFORMATION LABELS keyword
INFORMATION LABELS section
described
example
initial compartments
assigning bits to words
defined
sample of assigning
initial compartments= classification keyword
internationalizing
banner and trailer pages
printer banner and trailer pages
inverse words, defined

K

keywords for classifications

L

label builder, changing column headers
label_encodings.example file
label_encodings.gfi.multi file
label_encodings.gfi.single file
label_encodings.multi file
label_encodings.simple file
label_encodings.single file
label_encodings file
access-related words
CHANNELS section
classification keywords
classification name syntax
classifications example
color encoding example
commercial example
default versions
describing
example
example of creating
list of
LOCAL DEFINITIONS section
planning
protect as classification
specifying label colors
Sun extensions to GFI encodings
supplied versions
syntax
U.S. government multilabel version
U.S. government single-label version
U.S. government versions
word order requirements
label limit, clearance
label ranges, overview
label translation
labels
access decisions
account label range
accreditation ranges
arranging relationships
authorizations for changing
available during sessions
banner and trailer pages
CIPSO
color planning example
commercial example
comparing
components
configuring on printer output
dominance
example of analyzing
files supplied by Sun
installation example
internal representation
length of components
mandatory access and printing considerations
minimum protect as classification
overview of planning
planning
printed body pages
ranges
requirements for CONFIDENTIAL: INTERNAL_USE_ONLY
requirements for CONFIDENTIAL: NEED_TO_KNOW
requirements for CONFIDENTIAL: REGISTERED
restricting access by
session range
sources for label_encodings files
specifying colors
strategizing
system accreditation range
textual strings
translating
types
user accreditation range
valid
visible in workspaces
well-formed
worksheet example
LOCAL DEFINITIONS keyword
LOCAL DEFINITIONS section
adding to GFI encodings file
described
example

M

Managing Label Encodings (Task Map)
mandatory access control (MAC)
defined
used in access decisions
minimum clearance, example
minimum labels
account label range
commercial example
minimum protect as classification
example
printed output
minimum sensitivity label
defined
example
Modifying Sun Extensions (Task Map)

N

name= classification keyword

P

planners, worksheets
planning labels
colors
commercial example
label_encodings file
mechanics
overview
strategizing
supporting procedures
unlabeled printer output
Planning Labels (Task Map)
prefixes, in channels
Print PostScript File authorization
Print Without Labels authorization
printer banners
appearance
worksheet example
PRINTER BANNERS keyword
PRINTER BANNERS section
described
example
printer output
banner text
changing printed labels
channels
configuring labels and text
planning example
prefixes and suffixes
rules for handling
setting minimum protect as classification
printing, printer output
privileges, changing labels
protect as classification
example
overview

R

required combinations, combination constraints
REQUIRED COMBINATIONS keyword
rgb.txt file

S

security policy
defined
identifying site requirements
protecting information
setting minimum protect as
site-specific
sensitivity, type of label
sensitivity labels, labels
SENSITIVITY LABELS keyword
SENSITIVITY LABELS section
described
example
sessions
duration of label restrictions chosen at login
session range definition
sname= classification keyword
strict dominance
suffixes, in channels
Sun extensions, LOCAL DEFINITIONS section
syntax of label_encodings file
sys_trans_label privilege
system accreditation range
system security policy

T

task maps
Configuring Security Text on Print Jobs (Task Map)
Managing Label Encodings (Task Map)
Modifying Sun Extensions (Task Map)
Planning Labels (Task Map)
trailer pages
computing the classification
example
internationalizing
labeling
translating
between label representations
troubleshooting, label_encodings file
tsol_separator.ps file
types of labels

U

Upgrade File Label authorization
user accreditation range
users
authorizations for changing labels
printing authorizations
workspace access
/usr/lib/lp/postscript/tsol_separator.ps file
/usr/openwin/lib/rgb.txt file

V

value= classification keyword
values
of administrative classifications
of classifications
of compartments
VERSION= keyword
VERSION section
described
example

W

word order requirements, label_encodings file
words, planning example
WORDS keyword
work groups, represented by label compartments
worksheets
channels planner
classifications planner
clearances planner
color planner
compartments planner
printer banners planner
workspaces
access by users
labeled