|
|  以 PDF 格式下载本书 (963 KB)
| | | |
| A |
|
| abbreviations in names (  ) |
|
| access |
| | checks |
| | | executing a file ( ) |
| | | IPC files ( ) |
| | | mapped memory ( ) |
| | | MLDs ( ) |
| | | network ( ) ( ) |
| | | opening a file ( ) |
| | | pipes ( ) ( ) |
| | | process tracing ( ) |
| | | processes ( ) |
| | | PTYs ( ) |
| | | signals ( ) |
| | | SLDs ( ) |
| | | sockets ( ) |
| | | System V IPC ( ) ( ) |
| | | TLI ( ) |
| | | writing to a file ( ) |
| | | X Window System ( ) |
| | discretionary operations ( ) |
| | file labels ( ) |
| | file privileges ( ) |
| | file systems |
| | | code examples ( ) |
| | | privileges ( ) |
| | | security policy ( ) |
| | guidelines for labels ( ) |
| | mandatory operations ( ) |
| | multilevel port connections ( ) |
| | protection ( ) |
|
| accreditation ranges |
| | checking ( ) ( ) |
| | networks ( ) |
| | structures ( ) |
|
| ACLs, information on ( ) |
|
| actions |
| | assigning inheritable privileges ( ) |
| | creating ( ) |
|
| ADMIN_HIGH label |
| | defined ( ) |
| | initialize to ( ) |
| | running applications ( ) |
|
| ADMIN_LOW label |
| | defined ( ) |
| | initialize to ( ) |
| | running applications ( ) |
|
| adorned pathnames |
| | described ( ) |
| | translating ( ) |
|
| adornfc routine |
| | code example ( ) |
| | declaration ( ) |
|
| algorithms, process privileges ( ) |
|
| allowed privileges |
| | defined ( ) |
| | on file systems ( ) |
| | set to none during write ( ) |
| | turning off ( ) |
|
| APIs |
| | declarations ( ) |
| | list of types ( ) ( ) |
| | security policy on man pages ( ) |
|
| application auditing |
| | API declarations ( ) |
| | argument information ( ) |
| | audit trail ( ) |
| | command line arguments ( ) |
| | control commands ( ) |
| | creating audit records ( ) |
| | creating parallel audit records ( ) |
| | described ( ) |
| | event definition numbers ( ) |
| | invalid call ( ) |
| | IPC identifier ( ) |
| | preselection mask ( ) |
| | privilege sets ( ) |
| | privileged tasks ( ) ( ) |
| | process preselection mask ( ) |
| | queueing record information ( ) |
| | return token ( ) |
| | return values ( ) |
| | save area ( ) |
| | sensitivity label ( ) |
| | server area ( ) |
| | subject token ( ) |
| | terminator command ( ) |
| | token commands ( ) |
| | valid call ( ) |
|
| applications |
| | administrative ( ) |
| | integration ( ) |
| | MLDs ( ) |
| | testing and debugging ( ) |
| | user ( ) |
|
| atoms, predefined ( ) |
|
| audit_class file |
| | application auditing ( ) |
| | creating class ( ) |
|
| audit classes |
| | process preselection mask ( ) |
| | third-party ( ) |
|
| audit_control file |
| | application auditing ( ) |
| | process preselection mask ( ) |
|
| audit_event file |
| | application auditing ( ) |
| | creating event ( ) |
|
| audit events |
| | third-party ( ) |
| | viewing ( ) |
|
| audit records |
| | creating in an application ( ) |
| | minimum ( ) |
|
| audit tokens |
| | return token ( ) |
| | subject token structure ( ) |
|
| auditid field ( ) |
|
| auditing |
| | preselection mask |
| | | classes on file systems ( ) |
| | public files and directories ( ) |
|
| auditwrite routine |
| | code examples ( ) ( ) ( ) |
| | declaration ( ) |
| | invalid call ( ) |
| | valid call ( ) |
|
| authorizations |
| | and privileges ( ) ( ) |
| | Label builder ( ) |
| | when to check ( ) |
|
| AW_ARG token command ( ) |
|
| AW_DEFAULTRD token command ( ) |
|
| AW_DISCARDRD token command ( ) |
|
| AW_END terminator command ( ) |
|
| AW_EVENT token command ( ) |
|
| AW_EXEC_ARGS token command ( ) |
|
| AW_FLUSH token command ( ) |
|
| AW_GETRD token command ( ) |
|
| AW_IPC token command ( ) |
|
| AW_NOPRESELECT token command ( ) |
|
| AW_NOQUEUE token command ( ) |
|
| AW_NOSAVE token command ( ) |
|
| AW_NOSERVER token command ( ) |
|
| AW_PATH token command ( ) |
|
| AW_PRESELECT token command ( ) |
|
| AW_PRIVILEGE token command ( ) |
|
| AW_QUEUE token command ( ) |
|
| AW_RETURN token command ( ) ( ) |
|
| AW_SAVERD token command ( ) |
|
| AW_SERVER token command ( ) |
|
| AW_SLABEL token command ( ) ( ) |
|
| AW_SUBJECT token command ( ) |
|
| AW_TEXT token command ( ) |
|
| AW_USERD token command ( ) |
| | | |
| B |
|
| banner_fields structure ( ) |
|
| bclabel_t type ( ) |
|
| bclear_t type ( ) |
|
| bclearhigh routine |
| | code example ( ) |
| | declaration ( ) |
|
| bclearlow routine |
| | code example ( ) |
| | declaration ( ) |
|
| bcleartoh_r routine |
| | code example ( ) ( ) |
| | declaration ( ) |
|
| bcleartoh routine |
| | code example ( ) |
| | declaration ( ) |
|
| bcleartos routine |
| | code example ( ) |
| | declaration ( ) |
|
| bclearundef routine |
| | code example ( ) |
| | declaration ( ) |
|
| bclearvalid routine |
| | code example ( ) |
| | declaration ( ) |
|
| bclhigh routine |
| | code example ( ) |
| | declaration ( ) |
|
| bcllow routine, declaration ( ) |
|
| bcltobanner routine |
| | code example ( ) |
| | declarationBinary ( ) |
|
| bcltoh_r routine, declaration ( ) |
|
| bcltoh routine, declaration ( ) |
|
| bcltos routine |
| | code example ( ) ( ) |
| | declaration ( ) |
|
| bcltosl routine |
| | code example ( ) |
| | declaration ( ) |
|
| bclundef routine |
| | code example ( ) |
| | declaration ( ) |
|
| bilvalid routine, declaration ( ) |
|
| binary |
| | to hexadecimal ( ) ( ) |
|
| bldominates routine |
| | code example ( ) ( ) ( ) |
| | declaration ( ) ( ) |
|
| blequal routine |
| | code example ( ) ( ) |
| | declaration ( ) ( ) |
|
| blevel_t type ( ) |
|
| blinrange routine |
| | code example ( ) |
| | declaration ( ) ( ) |
|
| blinset routine |
| | code example ( ) ( ) |
| | declaration ( ) |
|
| blmaximum routine |
| | code example ( ) ( ) |
| | declaration ( ) ( ) |
|
| blminimum routine |
| | code example ( ) ( ) |
| | declaration ( ) ( ) |
|
| blstrictdom routine |
| | code example ( ) ( ) |
| | declaration ( ) ( ) |
|
| bltocolor routine |
| | code example ( ) |
| | declaration ( ) |
|
| bltocolor_t routine, declaration ( ) |
|
| bltype routine |
| | code example ( ) ( ) |
| | declaration ( ) ( ) |
|
| brange_t type ( ) |
|
| bslabel_t type ( ) ( ) |
|
| bslevel_t type ( ) |
|
| bslhigh routine |
| | code example ( ) |
| | declaration ( ) |
|
| bsllow routine, declaration ( ) |
|
| bsltoh_r routine, declaration ( ) |
|
| bsltoh routine, declaration ( ) |
|
| bsltos routine |
| | code example ( ) ( ) |
| | declaration ( ) |
|
| bslundef routine, declaration ( ) |
|
| bslvalid routine |
| | code example ( ) |
| | declaration ( ) |
|
| builders, GUI |
| | API declarations ( ) |
| | interfaces described ( ) |
| | | |
| C |
|
| caveats field ( ) |
|
| caveats_len field ( ) ( ) |
|
| channels field ( ) |
|
| channels_len field ( ) ( ) |
|
| chkauth routine, code example ( ) |
|
| cl_tsol_incoming_attrsp field ( ) |
|
| cl_tsol_outgoing_attrsp field ( ) |
|
| clabel_len field ( ) |
|
| classifications |
| | clearance component ( ) |
| | dominate ( ) ( ) |
| | equal ( ) ( ) |
| | SL component ( ) |
| | strictly dominate ( ) ( ) |
|
| clear_len field ( ) |
|
| clearances |
| | checking clearances ( ) |
| | session ( ) |
| | user ( ) |
|
| CLIENT structure ( ) |
|
| CMW labels |
| | API declarations ( ) |
| | components ( ) |
| | defined ( ) |
| | file systems ( ) |
| | objects ( ) |
| | processes ( ) |
|
| code examples |
| | accreditation range, checking ( ) |
| | auditing |
| | | adding a sensitivity label ( ) |
| | | creating audit records ( ) |
| | | creating mimimum record ( ) |
| | | creating parallel records ( ) |
| | | handling return values ( ) |
| | | invalid call ( ) |
| | | preliminary setup ( ) ( ) |
| | | queueing information ( ) |
| | | using preselection mask ( ) |
| | | using save area ( ) |
| | | using server area ( ) |
| | | valid call ( ) |
| | | writing arguments ( ) |
| | | writing command line arguments ( ) |
| | | writing IPC identifier ( ) |
| | | writing privilege sets ( ) |
| | authorizations |
| | | and privileges ( ) |
| | | checking ( ) |
| | checking labels ( ) |
| | clearances |
| | | checking before file access ( ) |
| | | checking if valid ( ) |
| | | checking prior to access ( ) |
| | | checking type ( ) |
| | | finding lower bound ( ) |
| | | finding upper bound ( ) |
| | | getting ( ) |
| | | initializing to ADMIN_LOW ( ) |
| | | initializing to undefined ( ) |
| | | setting ( ) |
| | | testing relationships ( ) |
| | | translating ( ) ( ) |
| | | translating and clipping ( ) |
| | | translating to hex ( ) ( ) ( ) |
| | CMW labels |
| | | getting on file system ( ) |
| | | getting on window ( ) |
| | | getting pointers to portions ( ) |
| | | getting process label ( ) ( ) |
| | | getting SL ( ) |
| | | setting on file system ( ) |
| | | setting on window ( ) |
| | | setting process label ( ) |
| | | translating to binary ( ) |
| | | translating to hex ( ) |
| | | translating to text ( ) |
| | databases |
| | | getting user entries ( ) |
| | file systems |
| | | accessing ( ) |
| | | executing ( ) |
| | | getting attribute flags ( ) |
| | | getting attributes ( ) |
| | | getting attributes (inode) ( ) |
| | | getting CMW label ( ) |
| | | getting label range ( ) |
| | | opening a file ( ) |
| | | setting CMW label ( ) |
| | | writing to a file ( ) |
| | Label builder ( ) |
| | label_encodings file |
| | | getting character-coded color names ( ) |
| | | getting information on ( ) |
| | | retrieving version string ( ) |
| | | translating printer banner ( ) |
| | labels |
| | | checking accreditation ranges ( ) |
| | | checking before file access ( ) |
| | | checking if valid ( ) |
| | | creating ( ) |
| | | finding lower bound ( ) |
| | | finding upper bound ( ) |
| | | getting file system range ( ) |
| | | initializing ( ) |
| | | testing relationships ( ) |
| | | translating to binary ( ) |
| | | translating to text ( ) |
| | | translating with font list ( ) |
| | MLDs |
| | | creating a file ( ) |
| | | getting adorned name ( ) |
| | | getting MLD name ( ) |
| | | getting real path ( ) |
| | | getting security attribute flags ( ) |
| | | getting security attributes ( ) |
| | | getting SLD name ( ) |
| | | getting working directory ( ) |
| | | opening a file ( ) |
| | printer banner, translating ( ) |
| | privilege sets |
| | | bracketing effective set ( ) |
| | | checking allowed set ( ) |
| | | checking permitted set ( ) |
| | | checking saved set ( ) |
| | | clearing allowed set ( ) |
| | | clearing effective set ( ) |
| | | clearing inheritable set ( ) |
| | | exec'ing a process ( ) |
| | | forking a process ( ) |
| | | removing permitted privs ( ) |
| | | setting forced set on file ( ) |
| | | setting inheritable set ( ) |
| | | translating set to string ( ) |
| | privileges |
| | | after checking authorizations ( ) |
| | | and authorizations ( ) |
| | | asserting privileges in sets ( ) |
| | | getting description text ( ) |
| | | setting user ID ( ) |
| | | translating ID to string ( ) |
| | | translating string to ID ( ) |
| | | when to use ( ) |
| | processes, getting attribute flags ( ) |
| | RPC |
| | | example application ( ) ( ) |
| | | header file ( ) |
| | | running the application ( ) |
| | security configuration variables ( ) |
| | SLDs |
| | | creating a file ( ) |
| | | getting name ( ) |
| | | getting security attributes ( ) |
| | | getting SLD name ( ) |
| | | getting working directory ( ) |
| | | opening a file ( ) |
| | System V IPC |
| | | using shared memory labels ( ) |
| | TSIX |
| | | allocating space ( ) |
| | | clearing attributes ( ) |
| | | client application ( ) ( ) |
| | | comparing attributes ( ) |
| | | copying attribute structures ( ) |
| | | creating attribute masks ( ) |
| | | duplicating structures ( ) |
| | | examining the last attribute ( ) |
| | | example application ( ) ( ) |
| | | freeing allocated space ( ) |
| | | getting attribute size ( ) |
| | | getting attributes ( ) |
| | | getting endpoint defaults ( ) |
| | | getting endpoint mask ( ) |
| | | peeking at attributes ( ) |
| | | receiving attributes ( ) |
| | | receiving new attributess ( ) |
| | | replying to request ( ) |
| | | sending attributes ( ) |
| | | server application ( ) |
| | | setting attributes ( ) |
| | | setting endpoint defaults ( ) |
| | | setting enpoint mask ( ) |
| | | using multilevel ports ( ) |
| | vfstab_adjunct file ( ) |
| | X Window System |
| | | getting window attributes ( ) |
| | | getting window CMW label ( ) |
| | | getting window userID ( ) |
| | | getting workstation owner ( ) |
| | | Motif application ( ) |
| | | setting window CMW label ( ) |
| | | translating with font list ( ) |
|
| command arguments |
| | control ( ) |
| | terminator ( ) |
| | token ( ) |
|
| communication endpoints |
| | access checks ( ) ( ) |
| | connections described ( ) |
| | objects ( ) |
| | security attributes (TSIX) ( ) |
|
| compartments |
| | clearance component ( ) |
| | dominate ( ) ( ) |
| | equal ( ) ( ) |
| | SL component ( ) |
| | strictly dominate ( ) ( ) |
|
| compile |
| | auditing libraries ( ) |
| | clearance libraries ( ) |
| | Label builder libraries ( ) |
| | label libraries ( ) |
| | MLD libraries ( ) |
| | privilege libraries ( ) |
| | profile database access libraries ( ) |
| | RPC libraries ( ) |
| | SLD libraries ( ) |
| | System V IPC libraries ( ) |
| | TSIX libraries ( ) |
| | user database access libraries ( ) |
| | X Window System libraries ( ) |
|
| config.privs file ( ) |
|
| connection requests |
| | security attributes ( ) |
| | security policy ( ) |
|
| control commands ( ) |
|
| core files ( ) |
|
| covert channels ( ) |
| | | |
| D |
|
| DAC |
| | accessing System V IPC objects ( ) |
| | privilege bracketing ( ) |
| | security policy ( ) |
|
| data types |
| | auditing ( ) |
| | clearance APIs ( ) |
| | label APIs ( ) |
| | Label buider APIs ( ) ( ) ( ) |
| | MLD APIs ( ) |
| | privilege APIs ( ) |
| | profile database access APIs ( ) |
| | RPC APIs ( ) |
| | SLD APIs ( ) |
| | System V IPC APIs ( ) |
| | TSIX APIs ( ) |
| | user database access APIs ( ) |
| | X Window System APIs ( ) |
|
| databases |
| | API declarations ( ) |
| | authorizations ( ) |
| | profile ( ) |
| | user ( ) |
|
| debugging, applications ( ) |
|
| development environment privs ( ) |
|
| devices |
| | input device privileges ( ) |
| | label ranges ( ) |
|
| DGA, privileges ( ) |
|
| diskless boot flag ( ) |
|
| dominate |
| | levels ( ) ( ) |
|
| downgrading labels |
| | guidelines ( ) |
| | privileges needed ( ) |
| | X Window System ( ) |
| | | |
| E |
|
| effective privileges |
| | bracketing ( ) ( ) ( ) |
| | change UID, GUID, or SGUID ( ) |
| | code example ( ) |
| | defined ( ) |
| | privilege to change IDs ( ) |
|
| equal |
| | levels ( ) ( ) |
|
| errors ( ) |
|
| exec system call |
| | inheritable privileges ( ) |
| | privileges in new program ( ) |
|
| execution profiles, checking ( ) |
|
| extended operations ( ) |
| | | |
| F |
|
| FAF_ALL flag ( ) |
|
| FAF_MLD flag ( ) |
|
| FAF_PUBLIC flag ( ) |
|
| FAF_SLD flag ( ) |
|
| features, operating system ( ) |
|
| fgetcmwfsrange system call, declaration ( ) |
|
| fgetcmwlabel system call, declaration ( ) |
|
| fgetfattrflag function, declaration ( ) |
|
| fgetfpriv system call, declaration ( ) |
|
| fgetfsattr system call, declaration ( ) ( ) |
|
| fgetmldadorn system call, declaration ( ) |
|
| fgetsldname system call |
| | creating SLDs ( ) |
| | declaration ( ) |
|
| file_audit privilege ( ) ( ) ( ) |
|
| file_dac_execute privilege ( ) |
|
| file_dac_read privilege ( ) |
|
| file_dac_search privilege ( ) ( ) |
|
| file_dac_write privilege ( ) ( ) |
|
| file_downgrade_sl privilege ( ) ( ) |
|
| file_mac_read privilege ( ) ( ) |
|
| file_mac_search privilege ( ) |
|
| file_mac_write privilege ( ) |
|
| file_owner privilege ( ) ( ) |
|
| file_setfpriv privilege ( ) |
|
| file_setpriv privilege ( ) |
|
| file systems |
| | access privileges ( ) |
| | accessing MLDs ( ) |
| | accessing SLDs ( ) |
| | ACL information ( ) |
| | hide upgraded names ( ) |
| | IPC bind to file ( ) |
| | objects ( ) |
| | polyinstantiated ( ) |
| | privileges, defined ( ) |
| | security policy ( ) ( ) |
|
| files |
| | allowed privileges ( ) |
| | forced privileges ( ) |
| | interpreted ( ) |
| | label privileges ( ) |
| | privilege sets ( ) |
| | privileges for creating core files ( ) |
| | when writing to executables ( ) |
|
| fonts |
| | font list translation ( ) |
| | font path privileges ( ) |
|
| forced privileges |
| | clearing ( ) |
| | defined ( ) |
| | on file systems ( ) |
| | set to none during write ( ) |
| | when turning off allowed ( ) |
|
| fork system call |
| | CMW label values ( ) |
| | guidelines for changing labels ( ) |
| | inheritable privileges ( ) |
| | privileges in child ( ) |
|
| FSA_ACL value ( ) |
|
| FSA_ACLCNT value ( ) |
|
| FSA_AFLAGS value ( ) |
|
| FSA_APRIV value ( ) |
|
| FSA_APSA value ( ) |
|
| FSA_APSACNT value ( ) |
|
| FSA_FPRIV value ( ) |
|
| FSA_LABEL value ( ) |
|
| FSA_LBLRNG value ( ) |
|
| FSA_MLDPFX value ( ) |
|
| fsetcmwlabel system call, declaration ( ) |
|
| fsetfattrflag system call, declaration ( ) |
|
| fsetfpriv system call, declaration ( ) |
| | | |
| G |
|
| get_priv_text routine |
| | code example ( ) |
| | declaration ( ) |
|
| getclearance system call |
| | code example ( ) |
| | declaration ( ) |
|
| getcmwfsrange function, code example ( ) |
|
| getcmwfsrange system call, declaration ( ) |
|
| getcmwlabel system call |
| | code example ( ) ( ) |
| | declaration ( ) |
|
| getcmwplabel system call |
| | code example ( ) ( ) |
| | declaration ( ) |
|
| getcsl routine |
| | code example ( ) ( ) |
| | declaration ( ) |
|
| getfattrflag system call |
| | code example ( ) |
| | declaration ( ) |
|
| getfpriv command ( ) ( ) |
|
| getfpriv system call |
| | code example ( ) |
| | declaration ( ) |
| | privileges needed ( ) |
|
| getfsattr system call |
| | code example ( ) |
| | declaration ( ) ( ) |
|
| getlabel command ( ) |
|
| getmldadorn system call |
| | code example ( ) |
| | declaration ( ) |
|
| getmsgqcmwlabel system call, declaration ( ) |
|
| getpattr system call |
| | code example ( ) |
| | declaration ( ) |
|
| getppriv system call |
| | code example ( ) ( ) ( ) |
| | declaration ( ) |
|
| getsemcmwlabel system call, declaration ( ) |
|
| getshmcmwlabel system call |
| | code example ( ) |
| | declaration ( ) |
|
| getsldname system call |
| | code example ( ) ( ) |
| | creating SLDs ( ) |
| | declaration ( ) |
|
| getuserentbyname routine, code example ( ) |
|
| getvfsaent routine, code example ( ) |
|
| getvfsafile routine, code example ( ) |
|
| gid field ( ) |
|
| GIDs, privilege to change ( ) |
|
| GUIs |
| | CDE ( ) |
| | Motif ( ) |
| | Xlib ( ) |
| | Xlib objects ( ) |
| | | |
| H |
|
| h_alloc routine |
| | code example ( ) ( ) |
| | declaration ( ) ( ) |
|
| h_free routine |
| | code example ( ) ( ) |
| | declaration ( ) ( ) |
|
| header field ( ) |
|
| header files |
| | auditing APIs ( ) |
| | clearance APIs ( ) |
| | label APIs ( ) |
| | Label builder APIs ( ) |
| | locations, list of ( ) |
| | MLD APIs ( ) |
| | privilege APIs ( ) |
| | profile database access APIs ( ) |
| | RPC APIs ( ) |
| | SLD APIs ( ) |
| | System V IPC APIs ( ) |
| | TSIX APIs ( ) |
| | user database access APIs ( ) |
| | X Window System APIs ( ) |
|
| header_len field ( ) ( ) |
|
| hexadecimal |
| | to binary ( ) ( ) |
|
| hide upgraded names ( ) |
|
| htobcl routine |
| | code example ( ) |
| | declaration ( ) |
|
| htobclear routine |
| | code example ( ) |
| | declaration ( ) |
|
| htobsl routine, declaration ( ) |
| | | |
| I |
|
| iaddr field ( ) |
|
| ilabel field ( ) |
|
| ilabel_len field ( ) |
|
| inheritable privileges |
| | code example ( ) |
| | defined ( ) |
|
| integrating an application ( ) |
|
| IPC |
| | communication endpoint objects ( ) |
| | file binding ( ) |
| | mechanisms described ( ) |
| | multilevel port connections ( ) |
| | network accreditation range ( ) |
| | objects ( ) |
| | polyinstantiated ports ( ) |
| | port binding ( ) |
| | privileges, defined ( ) |
| | security attributes |
| | | changing ( ) |
| | | contrast with Solaris ( ) |
| | | described ( ) |
| | security policy ( ) ( ) |
| | single-level port connections ( ) |
|
| ipc_dac_read privilege ( ) |
|
| ipc_dac_write privilege ( ) |
|
| ipc_mac_rad privilege ( ) |
|
| ipc_mac_read privilege ( ) ( ) |
|
| ipc_mac_write privilege ( ) |
|
| ipc_owner privilege ( ) ( ) |
| | | |
| L |
|
| Label builder |
| | Cancel pushbutton ( ) |
| | declarations ( ) |
| | described ( ) |
| | extended operations ( ) |
| | functionality ( ) |
| | Reset pushbutton ( ) |
| | SL radio button ( ) |
|
| label clipping |
| | API declarations ( ) ( ) |
| | translating with font list ( ) |
|
| label data types |
| | accreditation ranges ( ) |
| | banner fields ( ) |
| | CMW label structure ( ) |
| | label information ( ) |
| | levels ( ) |
| | sensitivity labels ( ) |
| | setting flags ( ) |
| | SL ranges ( ) |
|
| label_encodings file |
| | API declarations ( ) |
| | color names ( ) |
| | information on ( ) |
| | Label builder ( ) |
| | label translation flag ( ) |
| | Non-English ( ) |
| | retrieving version string ( ) |
| | valid clearances ( ) |
| | valid labels ( ) |
| | view flag ( ) |
|
| label_info structure ( ) |
|
| label ranges |
| | accreditation ( ) ( ) |
| | assigning ( ) |
| | checking ( ) |
| | described ( ) |
| | file systems |
| | | API declarations ( ) |
| | | data structure ( ) |
|
| labelinfo routine |
| | code example ( ) |
| | declaration ( ) |
|
| labels |
| | accreditation ranges ( ) |
| | acquiring ( ) |
| | administrative ( ) |
| | adorned pathnames ( ) |
| | API declarations ( ) |
| | | CMW labels ( ) |
| | | entire ( ) ( ) ( ) |
| | | file systems ( ) |
| | | label clipping with font list ( ) |
| | | label_encodings file ( ) |
| | | label types ( ) |
| | | labels ( ) |
| | | levels ( ) |
| | | reentrant routines ( ) |
| | changing on client ( ) |
| | checking before file access ( ) |
| | components ( ) |
| | defined ( ) |
| | dominate levels ( ) |
| | equal levels ( ) |
| | guidelines ( ) ( ) |
| | | downgrading labels ( ) |
| | | upgrading labels ( ) |
| | in CMW label ( ) |
| | Label builder ( ) |
| | MAC checks ( ) |
| | mandatory access ( ) |
| | on file systems ( ) |
| | privileged tasks ( ) |
| | privileges |
| | | changing process SL ( ) |
| | | downgrading labels ( ) |
| | | upgrading labels ( ) |
| | purpose ( ) |
| | reentrant routines ( ) ( ) |
| | relationships ( ) |
| | replying at equal SL ( ) |
| | strictly dominate levels ( ) |
| | System V IPC ( ) |
| | translation flag ( ) |
| | TSIX ( ) |
| | undefined ( ) |
| | user processes ( ) |
| | valid ( ) |
| | view ( ) |
| | view flag ( ) |
|
| labelvers routine |
| | code example ( ) |
| | declaration ( ) |
|
| LBUILD_CHECK_AR operation ( ) |
|
| LBUILD_LOWER_BOUND operation ( ) |
|
| LBUILD_MODE_CLR value ( ) |
|
| LBUILD_MODE_CMW value ( ) |
|
| LBUILD_MODE operation ( ) |
|
| LBUILD_MODE_SL value ( ) |
|
| LBUILD_SHOW operation ( ) |
|
| LBUILD_TITLE operation ( ) |
|
| LBUILD_UPPER_BOUND operation ( ) |
|
| LBUILD_USERFIELD operation ( ) |
|
| LBUILD_VALUE_CLR operation ( ) |
|
| LBUILD_VALUE_CMW operation ( ) |
|
| LBUILD_VALUE_SL operation ( ) |
|
| LBUILD_VIEW_EXTERNAL value ( ) |
|
| LBUILD_VIEW_INTERNAL value ( ) |
|
| LBUILD_VIEW operation ( ) |
|
| LBUILD_WORK_CMW operation ( ) |
|
| LBUILD_WORK_SL operation ( ) |
|
| LBUILD_WORKJ_CLR operation ( ) |
|
| LBUILD_X operation ( ) |
|
| LBUILD_Y operation ( ) |
|
| LD_LIBRARY_PATH ( ) |
|
| levels |
| | defined ( ) ( ) |
| | relationship ( ) |
| | relationships ( ) |
| | upper and lower bounds ( ) ( ) |
|
| lgetcmwlabel system call, declaration ( ) |
|
| libraries, compile |
| | auditing APIs ( ) |
| | clearance APIs ( ) |
| | label APIs ( ) |
| | Label builder APIs ( ) |
| | MLD APIs ( ) |
| | privilege APIs ( ) |
| | profile database access APIs ( ) |
| | RPC APIs ( ) |
| | SLD APIs ( ) |
| | System V IPC APIs ( ) |
| | trusted shared libraries ( ) |
| | TSIX APIs ( ) |
| | user database access APIs ( ) |
| | X Window System APIs ( ) |
|
| library routines |
| | API declarations ( ) |
| | security policy on man pages ( ) |
|
| LONG_CLASSIFICATION flag ( ) |
|
| LONG_WORDS flag ( ) |
|
| lsetcmwlabel system call, declaration ( ) |
| | | |
| M |
|
| MAC |
| | accessing System V IPC objects ( ) |
| | clearance limits ( ) |
| | guidelines for bypassing ( ) |
| | privilege bracketing ( ) |
| | security policy ( ) |
| | SL limits ( ) ( ) |
|
| manual pages |
| | modified ( ) |
| | security policy on ( ) |
|
| mapped memory, access checks ( ) |
|
| mappings |
| | multilevel ( ) |
| | single-level ( ) |
|
| message queues |
| | API declarations ( ) ( ) |
|
| mldgetcwd routine |
| | code example ( ) |
| | declaration ( ) |
|
| mldgetfattrflag system call |
| | code example ( ) |
| | declaration ( ) |
|
| mldrealpath routine |
| | code example ( ) |
| | declaration ( ) |
|
| mldrealpathl routine, declaration ( ) |
|
| MLDs |
| | accessing ( ) |
| | adorned names ( ) |
| | API declarations ( ) ( ) ( ) |
| | creating ( ) |
| | described ( ) |
| | information structure ( ) |
| | prefix on file systems ( ) |
| | privileged tasks ( ) |
| | querying MLD flag ( ) |
| | security attribute flags ( ) |
| | security policy ( ) |
| | structure ( ) |
| | symbolic links ( ) |
| | used by applications ( ) |
|
| mldsetfattrflag system call |
| | code example ( ) |
| | declaration ( ) |
|
| mldstat system call |
| | code example ( ) |
| | declaration ( ) ( ) |
|
| ModLabelData structure ( ) |
|
| Motif, described ( ) |
|
| Motif application |
| | described ( ) |
| | Label builder widgets ( ) |
| | online help ( ) |
| | source code ( ) |
|
| msggetl system call, declaration ( ) |
|
| MT_SAFE ( ) ( ) |
|
| multilabel file systems ( ) |
|
| multilevel mappings ( ) |
|
| multilevel ports |
| | contrast to polyinstantiated ( ) |
| | described ( ) ( ) |
| | example application ( ) |
| | replying at equal SL ( ) |
| | RPC ( ) |
| | | |
| N |
|
| names, abbreviations ( ) |
|
| net_downgrade_sl privilege ( ) |
|
| net_mac_read privilege ( ) |
|
| net_reply_equal privilege ( ) ( ) |
|
| net_setclr privilege ( ) |
|
| net_setid privilege ( ) |
|
| net_setpriv privilege ( ) |
|
| networks, security attributes ( ) |
|
| NEW_LABEL flag ( ) |
|
| NO_CLASSIFICATION flag ( ) |
|
| NO_CORRECTION flag ( ) |
| | | |
| O |
|
| objects ( ) ( ) |
|
| Open Look Interface Toolkit (OLIT) ( ) |
|
| OpenWindows ( ) |
|
| operating system features ( ) |
|
| ouid field ( ) |
| | | |
| P |
|
| packets |
| | location of security attributes ( ) |
| | security attributes ( ) |
|
| PAF_DISKLESS_BOOT value ( ) |
|
| PAF_LABEL_VIEW value ( ) |
|
| PAF_LABEL_XLATE value ( ) |
|
| PAF_NO_TOKMAP value ( ) |
|
| PAF_PRINT_SYSTEM value ( ) |
|
| PAF_PRIV_DEBUG value ( ) |
|
| PAF_SELAGENT value ( ) |
|
| PAF_SELAGNT flag ( ) |
|
| PAF_TRUSTED_PATH value ( ) |
|
| pathnames |
| | adorned names ( ) |
| | translation ( ) |
|
| permitted privileges |
| | checking ( ) |
| | code example ( ) |
| | defined ( ) |
|
| pfsh command |
| | determining privilege origination ( ) |
| | inheriting privileges ( ) |
|
| pid field ( ) |
|
| pipes, access checks ( ) |
|
| polyinstantiation |
| | described ( ) |
| | files and directories ( ) |
| | network connections ( ) |
|
| ports, single-level ( ) |
|
| praudit command, audit trail ( ) |
|
| print server applications ( ) |
|
| printer banner page, label translation ( ) |
|
| printing flag ( ) |
|
| PRIV_ALLOWED value ( ) |
|
| PRIV_ASSERT macro |
| | and str_to_priv routine ( ) |
| | described ( ) |
|
| PRIV_CLEAR macro ( ) |
|
| PRIV_EFFECTIVE value ( ) |
|
| PRIV_EMPTY macro ( ) |
|
| PRIV_EQUAL macro ( ) |
|
| PRIV_FILL macro ( ) |
|
| PRIV_FORCED value ( ) |
|
| priv_ftype_t type ( ) |
|
| PRIV_INHERITABLE value ( ) |
|
| PRIV_INTERSECT macro ( ) |
|
| PRIV_ISASSERT macro |
| | code example ( ) ( ) |
| | described ( ) |
|
| PRIV_ISEMPTY macro ( ) |
|
| PRIV_ISFULL macro ( ) |
|
| PRIV_ISSUBSET macro |
| | described ( ) |
| | purpose ( ) |
|
| PRIV_OFF value ( ) |
|
| PRIV_ON value ( ) |
|
| priv_op_t type ( ) |
|
| PRIV_PERMITTED value ( ) |
|
| priv_ptype_t type ( ) |
|
| PRIV_SAVED value ( ) |
|
| priv_set_t structure ( ) |
|
| priv_set_to_str routine |
| | code example ( ) |
| | declaration ( ) |
|
| PRIV_SET value ( ) |
|
| priv_t type ( ) |
|
| PRIV_TEST macro ( ) |
|
| priv_to_str routine |
| | code example ( ) |
| | declaration ( ) |
|
| PRIV_UNION macro ( ) |
|
| PRIV_XOR macro ( ) |
|
| privilege APIs |
| | declarations ( ) ( ) ( ) |
| | macros ( ) |
|
| privilege bracketing |
| | benefits ( ) |
| | code example ( ) |
| | procedure ( ) |
|
| privilege data types |
| | file sets ( ) |
| | operations on sets ( ) |
| | privilege ID ( ) |
| | process sets ( ) |
| | structure ( ) |
|
| privilege debugging |
| | enabling ( ) ( ) |
| | flag ( ) |
|
| privilege macros |
| | API declarations ( ) |
| | asserting privilege example ( ) |
| | described ( ) |
| | initializing set example ( ) |
|
| privilege sets |
| | after exec function ( ) |
| | after fork function ( ) |
| | algorithms ( ) |
| | API declarations ( ) |
| | file ( ) |
| | on network messages ( ) |
| | privileged tasks ( ) |
| | privileges needed ( ) |
| | process ( ) ( ) |
| | turning off allowed sey ( ) |
|
| privileged process defined ( ) |
|
| privileged tasks |
| | auditing ( ) |
| | clearance ( ) |
| | IPC ( ) |
| | Label builder ( ) |
| | labels ( ) |
| | MLDs ( ) |
| | multilevel port connections ( ) |
| | privilege sets ( ) |
| | RPC ( ) |
| | SLDs ( ) |
| | System V IPC ( ) |
| | TSIX ( ) |
| | X Window System ( ) |
|
| privileges |
| | administrative applications ( ) |
| | and authorizations ( ) |
| | API declarations ( ) |
| | applications, privileged ( ) |
| | categories |
| | | file system ( ) |
| | | IPC ( ) |
| | | process ( ) |
| | | system ( ) |
| | | System V IPC ( ) |
| | | X Window System ( ) |
| | contrast to superuser ( ) |
| | defined ( ) |
| | delimiters ( ) |
| | description text API ( ) |
| | development environment ( ) |
| | errors ( ) |
| | guidelines ( ) |
| | on interpreted files ( ) |
| | scripts ( ) |
| | separators ( ) |
| | TCB ( ) ( ) |
| | UIDs, changed ( ) |
| | upgraded names |
| | | hide ( ) |
| | user applications ( ) |
| | when to use ( ) ( ) |
| | when writing to executable ( ) |
|
| proc_audit_appl privilege ( ) |
|
| proc_audit_tcb privilege ( ) |
|
| proc_mac_owner privilege ( ) |
|
| proc_mac_read privilege ( ) |
|
| proc_set_sl privilege ( ) |
|
| proc_setclr privilege ( ) ( ) |
|
| proc_setid privilege ( ) |
|
| proc_setsl privilege ( ) |
|
| process clearances |
| | acquiring ( ) |
| | API declarations ( ) ( ) ( ) |
| | checking before file access ( ) |
| | components ( ) |
| | data types |
| | | clearance structure ( ) |
| | | levels ( ) |
| | described ( ) |
| | dominate levels ( ) |
| | equal levels ( ) |
| | levels defined ( ) |
| | MAC checks ( ) |
| | mandatory access operations ( ) |
| | privileged tasks ( ) |
| | reentrant routines ( ) |
| | strictly dominate levels ( ) |
| | TSIX ( ) |
| | valid ( ) |
|
| process preselection mask |
| | application auditing ( ) |
| | changing ( ) |
| | return token ( ) |
|
| process tracing, access checks ( ) |
|
| processes |
| | changing labels, guidelines ( ) |
| | CMW label, inheriting values ( ) |
| | effective privilege set ( ) |
| | inheritable privilege set ( ) |
| | label privileges ( ) |
| | objects ( ) |
| | permitted privilege set ( ) |
| | privilege sets ( ) |
| | privileged, defined ( ) |
| | privileged tasks ( ) |
| | privileges, defined ( ) |
| | saved privilege set ( ) |
|
| properties |
| | described ( ) ( ) |
| | privileges ( ) |
|
| property.atoms file ( ) |
|
| protect_as field ( ) |
|
| protect_as_len field ( ) ( ) |
|
| PTYs, access checks ( ) |
|
| public.atoms file ( ) |
| | | |
| R |
|
| read access, security policy ( ) |
|
| read down ( ) |
|
| read equal ( ) |
|
| reentrant routines |
| | binary to hex declarations ( ) |
| | binary to hex translation ( ) ( ) |
|
| relationships |
| | between levels ( ) ( ) |
|
| releasing an application ( ) |
|
| resource file ( ) |
|
| ResourceType structure ( ) |
|
| RPC |
| | API man pages ( ) |
| | client program ( ) ( ) |
| | described ( ) |
| | example application ( ) ( ) |
| | mappings ( ) |
| | multilevel ports ( ) |
| | privileged tasks ( ) |
| | remote procedure ( ) |
| | running the application ( ) |
| | security attributes ( ) |
| | server program ( ) |
|
| runpd command, using ( ) |
| | | |
| S |
|
| saved privileges |
| | change UID, GUID, or SGUID ( ) |
| | checking ( ) |
| | defined ( ) |
| | purpose ( ) |
|
| sbcleartos routine |
| | code example ( ) |
| | declaration ( ) |
|
| sbcltos routine, declaration ( ) |
|
| sbsltos routine |
| | code example ( ) |
| | declaration ( ) |
|
| scripts, privileged ( ) |
|
| secconf system call |
| | code example ( ) |
| | declaration ( ) |
|
| security attribute flags |
| | API declarations ( ) ( ) |
| | file systems |
| | | API declarations ( ) |
| | | contrast with Solaris ( ) |
| | | manifest constants ( ) ( ) |
| | processes |
| | | API declarations ( ) |
| | | contrast with Solaris ( ) |
| | | getting and setting ( ) |
| | | manifest constants ( ) |
| | | when to use ( ) |
|
| security attributes |
| | access checks ( ) |
| | access to privileges ( ) |
| | accessing labels ( ) |
| | API declarations ( ) |
| | file systems |
| | | API declarations ( ) |
| | | contrast with Solaris ( ) |
| | | described ( ) |
| | | manifest constants ( ) |
| | | vfstab_adjunct file ( ) |
| | | when to use ( ) |
| | MLDs ( ) |
| | on software packages ( ) |
| | privileges ( ) |
| | processes ( ) |
| | RPC ( ) |
| | TSIX |
| | | changing ( ) |
| | | changing procedure ( ) |
| | | contrast with Solaris ( ) |
| | | location on packet ( ) |
| | | sending and receiving ( ) |
| | X Window System |
| | | contrast with Solaris ( ) |
| | | described ( ) |
|
| security policy |
| | accessing MLDs ( ) |
| | accessing SLDs ( ) |
| | administrative applications ( ) |
| | auditing ( ) |
| | CDE actions ( ) |
| | clearances ( ) |
| | command line execution ( ) ( ) |
| | communication endpoints ( ) |
| | covert channels ( ) |
| | discretionary access operations ( ) |
| | file system examples ( ) |
| | file systems ( ) |
| | file systems access ( ) |
| | file systems privileges ( ) |
| | IPC ( ) ( ) |
| | label guidelines ( ) |
| | labels ( ) |
| | mandatory access operations ( ) |
| | mapped memory ( ) |
| | MLD access ( ) |
| | multilevel ports ( ) |
| | on man pages ( ) |
| | pipes ( ) ( ) |
| | privilege bracketing ( ) |
| | privilege guidelines ( ) |
| | privilege sets ( ) |
| | privileges |
| | | when to use ( ) |
| | privileges, when to use ( ) |
| | process tracing ( ) |
| | PTYs ( ) |
| | read access ( ) |
| | reading man pages ( ) |
| | signals ( ) |
| | SLD access ( ) |
| | sockets ( ) |
| | System V IPC ( ) ( ) |
| | TLI ( ) |
| | translating labels ( ) ( ) |
| | user applications ( ) |
| | write access ( ) |
| | X Window System ( ) |
|
| selection agent flag ( ) |
|
| selection.atoms file ( ) |
|
| Selection Manager |
| | bypassing with flag ( ) |
| | security policy ( ) |
|
| semaphore sets |
| | API declarations ( ) ( ) |
|
| semgetl system call, declaration ( ) |
|
| sessionid field ( ) |
|
| set_effective_priv routine |
| | code example ( ) ( ) ( ) |
| | declaration ( ) |
|
| set_id structure ( ) |
|
| set_inheritable_priv routine |
| | code example ( ) |
| | declaration ( ) |
|
| set_permitted_priv routine |
| | code example ( ) |
| | declaration ( ) |
|
| setbltype routine |
| | code example ( ) ( ) |
| | declaration ( ) ( ) |
|
| SETCL_ALL flag ( ) |
|
| SETCL_SL flag ( ) |
|
| setclearance system call |
| | code example ( ) |
| | declaration ( ) |
|
| setcmwlabel system call |
| | code example ( ) |
| | declaration ( ) |
|
| setcmwplabel system call |
| | code example ( ) |
| | declaration ( ) |
| | when to use ( ) |
|
| setcsl routine |
| | code example ( ) |
| | declaration ( ) |
|
| seteuid system call, and privileges ( ) |
|
| setfattrflag system call |
| | code example ( ) |
| | declaration ( ) |
|
| setfpriv command, scripts ( ) |
|
| setfpriv system call |
| | code example ( ) ( ) |
| | declaration ( ) |
|
| setpattr system call declaration ( ) |
|
| setppriv system call |
| | declaration ( ) |
| | privilege bracketing ( ) |
|
| setreuid system call, and privileges ( ) |
|
| setting_flag field ( ) |
|
| setuid system call, and privileges ( ) |
|
| SGIDs, privilege to change ( ) |
|
| shared libraries, trusted ( ) |
|
| shared memory regions |
| | API declarations ( ) ( ) |
|
| shell escapes and privileges ( ) |
|
| shmgetl system call |
| | code example ( ) |
| | declaration ( ) |
|
| SHORT_CLASSIFICATION flag ( ) |
|
| SHORT_WORDS flag ( ) |
|
| signals, access checks ( ) |
|
| single-label file systems ( ) |
|
| single-level mappings ( ) |
|
| single-level ports |
| | changing client SL ( ) |
| | described ( ) |
|
| sl field ( ) ( ) |
|
| slabel_len field ( ) |
|
| SLDs |
| | accessing ( ) |
| | adorned names ( ) |
| | API declarations ( ) ( ) |
| | creating ( ) |
| | described ( ) |
| | information structure ( ) |
| | privileged tasks ( ) |
| | sensitivity labels ( ) |
| | structure ( ) |
|
| SLs |
| | See labels | |
|
| sockets |
| | access checks ( ) ( ) ( ) |
|
| software packages |
| | adding new ( ) |
| | creating ( ) |
| | editing existing ( ) |
| | MAC attributes on ( ) |
| | prototype file ( ) |
|
| st_atime field ( ) |
|
| st_ctime field ( ) |
|
| st_gid field ( ) |
|
| st_mode field ( ) |
|
| st_mtime field ( ) |
|
| st_nlink field ( ) |
|
| st_uid field ( ) |
|
| stat structure ( ) ( ) ( ) |
|
| stobc routine, code example ( ) |
|
| stobcl routine, declaration ( ) |
|
| stobclear routine |
| | code example ( ) |
| | declaration ( ) |
|
| stobsl routine |
| | code example ( ) ( ) |
| | declaration ( ) |
|
| str_to_priv routine |
| | and PRIV_ASSERT macro ( ) |
| | code example ( ) |
| | declaration ( ) |
|
| str_to_priv_set routine |
| | code example ( ) |
| | declaration ( ) |
|
| strictly dominate levels ( ) ( ) |
|
| SUN_CLR_ID value ( ) |
|
| SUN_CLR_UN value ( ) |
|
| SUN_CMW_ID value ( ) |
|
| SUN_SL_ID value ( ) |
|
| SUN_SL_UN value ( ) |
|
| SVCXPRT structure ( ) |
|
| symbolic links |
| | information structure ( ) |
| | MLDs ( ) |
|
| sys_trans_label privilege ( ) ( ) ( ) ( ) |
|
| system, privileges defined ( ) |
|
| SYSTEM_ACCREDITATION_RANGE value ( ) |
|
| system calls |
| | API declarations ( ) |
| | security policy in man pages ( ) |
|
| system security configuration |
| | API declarations ( ) |
| | variables described ( ) |
| | when to check ( ) |
|
| System V IPC |
| | access checks ( ) ( ) |
| | API declarations ( ) ( ) ( ) ( ) |
| | described ( ) |
| | discretionary access ( ) |
| | mandatory access ( ) |
| | privileged tasks ( ) |
| | privileges, defined ( ) |
| | sensitivity label structure ( ) |
| | | |
| T |
|
| T6_AUDIT_ID value ( ) |
|
| T6_AUDIT_INFO value ( ) |
|
| T6_CLEARANCE value ( ) |
|
| T6_GID value ( ) |
|
| T6_GROUPS value ( ) |
|
| T6_PID value ( ) |
|
| T6_PRIVILEGES value ( ) |
|
| T6_PROC_ATTR value ( ) |
|
| T6_SESSION_IC value ( ) |
|
| T6_SL value ( ) |
|
| T6_UID value ( ) |
|
| t6alloc_blk(3NSL) |
| | code example ( ) |
| | declaration ( ) |
|
| t6allocated_attrs(3NSL), code example ( ) |
|
| t6allocated_attrs routine, declaration ( ) |
|
| t6attr_id_t structure ( ) |
|
| t6attr_t structure ( ) |
|
| t6clear_blk(3NSL) |
| | code example ( ) |
| | declaration ( ) |
|
| t6cmp_blk(3NSL) |
| | code example ( ) |
| | declaration ( ) |
|
| t6copy_blk(3NSL) |
| | code example ( ) |
| | declaration ( ) |
|
| t6dup_blk(3NSL) |
| | code example ( ) |
| | declaration ( ) |
|
| t6ext_attr(3NSL), declaration ( ) |
|
| t6free_blk(3NSL) |
| | code example ( ) |
| | declaration ( ) |
|
| t6get_attr(3NSL) |
| | code example ( ) |
| | declaration ( ) |
|
| t6get_endpt_default(3NSL) |
| | code example ( ) |
| | declaration ( ) |
|
| t6get_endpt_mask(3NSL) |
| | code example ( ) |
| | declaration ( ) |
|
| t6last_attr(3NSL) |
| | code example ( ) |
| | declaration ( ) |
|
| T6M_ALL_ATTRS value ( ) |
|
| T6M_AUDIT_ID value ( ) |
|
| T6M_AUDIT_INFO value ( ) |
|
| T6M_CLEARANCE value ( ) |
|
| T6M_GID value ( ) |
|
| T6M_GROUPS value ( ) |
|
| T6M_NO_ATTRS value ( ) |
|
| T6M_PID value ( ) |
|
| T6M_PRIVILEGES value ( ) |
|
| T6M_SESSION_ID value ( ) |
|
| T6M_SL value ( ) |
|
| T6M_UID value ( ) |
|
| t6mask_t structure ( ) |
|
| t6new_attr(3NSL) |
| | code example ( ) |
| | declaration ( ) |
|
| t6peek_attr(3NSL) |
| | code example ( ) |
| | declaration ( ) |
|
| t6present_attrs(3NSL), code example ( ) |
|
| t6present_attrs routine, declaration ( ) |
|
| t6recvfrom(3NSL) |
| | code example ( ) |
| | declaration ( ) |
|
| t6sendto(3NSL) |
| | code example ( ) |
| | declaration ( ) |
|
| t6set_attr(3NSL) |
| | code example ( ) |
| | declaration ( ) |
|
| t6set_endpt_default(3NSL) |
| | code example ( ) |
| | declaration ( ) |
|
| t6set_endpt_mask(3NSL) |
| | code example ( ) |
| | declaration ( ) |
|
| t6size_attr(3NSL) |
| | code example ( ) |
| | declaration ( ) |
|
| t6supported_attrs(3NSL), code example ( ) |
|
| t6supported_attrs routine, declaration ( ) |
|
| TCB |
| | network flag ( ) |
| | privileged applications ( ) |
|
| terminator commands ( ) |
|
| testing and debugging applications ( ) |
|
| text, color names ( ) |
|
| TLI |
| | access checks ( ) |
| | objects ( ) |
|
| token commands ( ) |
|
| translation |
| | adorned pathnames ( ) |
| | clearances |
| | | binary and hexadecimal ( ) |
| | | binary to hex ( ) |
| | | binary to text ( ) |
| | | binary to text, clipped ( ) |
| | | forms ( ) |
| | | reentrant routines ( ) |
| | | text to binary ( ) |
| | CMW labels |
| | | binary to hex ( ) |
| | | binary to text ( ) |
| | | input form ( ) |
| | | output form ( ) |
| | | text to binary ( ) |
| | font list ( ) |
| | labels |
| | | binary and hexadecimal ( ) ( ) |
| | | binary and text rules ( ) |
| | | binary to text ( ) ( ) |
| | | binary to text guidelines ( ) |
| | | flag values ( ) |
| | | font list ( ) |
| | | forms ( ) |
| | | input form ( ) |
| | | output form ( ) |
| | | reentrant routines ( ) |
| | | text to binary correction ( ) |
| | | view ( ) |
| | privileges |
| | | ID to string ( ) |
| | | string to ID ( ) |
| | privileges, binary and text ( ) |
| | privileges needed ( ) ( ) |
| | reentrant binary to hex ( ) |
|
| Trojan horse protection ( ) |
|
| trusted path, attribute flag ( ) |
|
| trusted shared libraries ( ) |
|
| trusted streams |
| | API declarations ( ) ( ) |
| | objects ( ) |
|
| TSIX library |
| | API declarations ( ) ( ) ( ) |
| | attribute enumerations ( ) |
| | attribute masks ( ) |
| | attribute structure ( ) |
| | changing client SL ( ) |
| | changing security attributes ( ) ( ) |
| | client application ( ) ( ) |
| | described ( ) |
| | example application ( ) ( ) |
| | network accreditation range ( ) |
| | privileged tasks ( ) |
| | replying at equal SL ( ) |
| | security attributes ( ) |
| | server application ( ) |
|
| TSOL_AUTH_FILE_DOWNGRADE authorization ( ) |
|
| TSOL_HIDE_UPGRADED_NAMES variable ( ) |
|
| tsol_lbuild_create routine |
| | declaration ( ) |
| | description ( ) |
|
| tsol_lbuild_destroy routine, declaration ( ) |
|
| tsol_lbuild_get routine |
| | code example ( ) |
| | declaration ( ) |
|
| tsol_lbuild_set routine |
| | code example ( ) |
| | declaration ( ) |
| | | |
| U |
|
| uid field ( ) ( ) ( ) |
|
| UIDs |
| | changed ( ) |
| | getting on window ( ) |
| | getting on workstation ( ) |
| | privilege to change ( ) |
|
| undefined labels, described ( ) |
|
| upgraded names, hide ( ) |
|
| upgrading labels |
| | guidelines ( ) |
| | privileges needed ( ) |
| | X Window System ( ) |
|
| USER_ACCREDITATION_RANGE value ( ) |
| | | |
| V |
|
| valid clearances |
| | checking ( ) |
| | ensuring ( ) |
|
| valid labels |
| | accreditation ranges ( ) |
| | checking ( ) |
| | ensuring ( ) |
|
| vers_len field ( ) |
|
| version string retrieval ( ) |
|
| vfstab_adjunct file |
| | code example ( ) |
| | retrieving entries ( ) |
|
| VIEW_EXTERNAL flag ( ) |
|
| VIEW_INTERNAL flag ( ) |
| | | |
| W |
|
| win_config privilege ( ) |
|
| win_dac_read privilege ( ) |
|
| win_dac_write privilege ( ) |
|
| win_devices privilege ( ) |
|
| win_dga privilege ( ) |
|
| win_downgrade_sl privilege ( ) |
|
| win_fontpath privilege ( ) |
|
| win_mac_read privilege ( ) |
|
| win_mac_write privilege ( ) |
|
| win_upgrade_sl privilege ( ) |
|
| windows |
| | client, security policy ( ) |
| | defaults ( ) |
| | described ( ) |
| | override-redirect, security policy ( ) |
| | privileges ( ) |
| | root, security policy ( ) |
| | security policy ( ) |
|
| write access, security policy ( ) |
|
| write equal ( ) |
|
| write up ( ) |
| | | |
| X |
|
| X Window System |
| | API declarations ( ) ( ) ( ) |
| | client attributes structure ( ) |
| | defaults ( ) |
| | input devices ( ) |
| | label clipping API declarations ( ) |
| | Motif source code ( ) |
| | object attribute structure ( ) |
| | object type definition ( ) |
| | objects ( ) ( ) |
| | override-redirect ( ) |
| | predefined atoms ( ) |
| | privileged tasks ( ) |
| | privileges, defined ( ) |
| | properties ( ) |
| | property attribute structure ( ) |
| | protocol extensions ( ) |
| | resource file ( ) |
| | root window ( ) |
| | security attributes |
| | | contrast with Solaris ( ) |
| | | described ( ) |
| | security policy ( ) |
| | Selection Manager ( ) |
| | server control ( ) |
|
| xbcleartos routine, declaration ( ) |
|
| xbcltos routine, declaration ( ) |
|
| xbsltos routine |
| | code example ( ) |
| | declaration ( ) |
|
| Xlib |
| | API declarations ( ) ( ) |
| | described ( ) |
| | objects ( ) |
|
| xp_tsol_incoming_attrsp field ( ) |
|
| xp_tsol_incoming_new_attrs field ( ) |
|
| xp_tsol_outgoing_attrsp field ( ) |
|
| Xsession file ( ) |
|
| XTsolClientAttributes structure ( ) |
|
| XTSOLgetClientAttributes routine, declaration ( ) |
|
| XTSOLgetPropAttributes routine, declaration ( ) |
|
| XTSOLgetPropLabel routine, declaration ( ) |
|
| XTSOLgetPropUID routine, declaration ( ) |
|
| XTSOLgetResAttributes routine |
| | code example ( ) |
| | declaration ( ) |
|
| XTSOLgetResLabel routine |
| | code example ( ) |
| | declaration ( ) |
|
| XTSOLgetResUID routine |
| | code example ( ) |
| | declaration ( ) |
|
| XTSOLgetSSHeight routine, declaration ( ) |
|
| XTSOLgetWorkstationOwner routine |
| | code example ( ) |
| | declaration ( ) |
|
| XTSOLIsWindowTrusted routine, declaration ( ) |
|
| XTSOLmakeTPWindow routine, declaration ( ) |
|
| XTsolPropAttributes structure ( ) |
|
| XTsolResAttributes structure ( ) |
|
| XTSOLsetPropLabel routine, declaration ( ) |
|
| XTSOLsetPropUID routine, declaration ( ) |
|
| XTSOLsetResLabel routine |
| | code example ( ) |
| | declaration ( ) |
|
| XTSOLsetSessionHI routine, declaration ( ) |
|
| XTSOLsetSessionLO routine, declaration ( ) |
|
| XTSOLsetSSHeight routine, declaration ( ) |
|
| XTSOLsetWorkstationOwner routine, declaration ( ) |
|
| Xtsolusersession file ( ) |
|
