TRUSTED_EXTENSIONS(7) Standards, Environments, and Macros TRUSTED_EXTENSIONS(7)

NAME


trusted_extensions - Trusted Extensions

DESCRIPTION


Trusted Extensions software is a specific configuration of the Operating
System. Trusted Extensions provides labels for local objects and
processes, for zones and file systems, and for network communications.
These labels are used to implement a Multilevel Security (MLS) policy
that restricts the flow of information based on label relationships. In
contrast to Discretionary Access Control (DAC) based on ownership, the
MLS policy enforced by Trusted Extensions is an example of Mandatory
Access Control (MAC).


By default, Trusted Extensions software is disabled. It is enabled and
disabled (but not configured) by the labeld(8) service, identified by the
FMRI:

svc:/system/labeld:default


The system must be rebooted after enabling or disabling labeld to
activate or deactivate Trusted Extensions software.

SEE ALSO


label_encodings(5), labels(7), labeld(8)

illumos August 3, 2017 TRUSTED_EXTENSIONS(7)