JavaScript is required to for searching.
Skip Navigation Links
Exit Print View
Compartmented Mode Workstation Labeling: Encodings Format     Oracle Solaris 11.1 Information Library
search filter icon
search icon

Document Information

Preface

1.  Introduction

2.  Structure and Syntax of Encodings File

3.  Classification Encodings

4.  Information Label Encodings

5.  Sensitivity Label, Clearance, Channels, and Printer Banner Encodings

6.  Accreditation Range and Name Information Label Encodings

User Accreditation Range Examples

Specifying the User Accreditation Range

The Classification= Keyword

The All Compartment Combinations Valid Keyword

The All Compartment Combinations Valid Except: Keyword

The Only Valid Compartment Combinations: Keyword

Specifying System Accreditation Range-Related Constants

The Minimum Clearance= Keyword

The Minimum Sensitivity Label= Keyword

The Minimum Protect As Classification= Keyword

Name Information Label Encodings

7.  General Considerations for Specifying Encodings

8.  Enforcing Proper Label Adjudications

A.  Encodings Specifications Error Messages

B.  Annotated Sample Encodings

C.  CMW Labeling Software C1.0 Release Notes, 6/8/93

Glossary

Index

User Accreditation Range Examples

The user accreditation range of a system is the set of sensitivity labels at which normal users are intended to be able to operate. The user accreditation range is conceptually specified as a list (or set) of sensitivity labels. In this manner, certain sensitivity labels can be left out of the list, as will be the case for many systems.

Note that the restriction the user accreditation range places on sensitivity labels does not apply to either clearances or information labels.

For example, consider a system that processes TS along with compartments A, B, and C. The complete list of possible sensitivity labels (and hence the largest possible user accreditation range) for such a system is:

TS TS A TS B TS C TS A B TS A C TS B C TS A B C

However, a more realistic user accreditation range for such a system might be:

TS A B TS A C TS A B C

In this example, compartments B and C can be processed only in combination with A, and A cannot be processed alone.