Trusted Extensions Library Functions sbltos(3TSOL)
NAME
sbltos, sbsltos, sbcleartos - translate binary labels to
canonical character-coded labels
SYNOPSIS
cc [flag...] file... -ltsol [library...]
#include
char *sbsltos(const mlabelt *label, const int len);
char *sbcleartos(const mlabelt *clearance, const int len);
DESCRIPTION
These functions translate binary labels into canonical
strings that are clipped to the number of printable charac-
ters specified in len. Clipping is required if the number of
characters of the translated string is greater than len.
Clipping is done by truncating the label on the right to two
characters less than the specified number of characters. A
clipped indicator, "<-", is appended to sensitivity labels
and clearances. The character-coded label begins with a
classification name separated with a single space character
from the list of words making up the remainder of the label.
The binary labels must be of the proper defined type and
dominated by the process's sensitivity label. A len of 0
(zero) returns the entire string with no clipping.
The sbsltos() function translates a binary sensitivity label
into a clipped string using the long form of the words and
the short form of the classification name. If len is less
than the minimum number of characters (three), the transla-
tion fails.
The sbcleartos() function translates a binary clearance into
a clipped string using the long form of the words and the
short form of the classification name. If len is less than
the minimum number of characters (three), the translation
fails. The translation of a clearance might not be the same
as the translation of a sensitivity label. These functions
use different tables of the labelencodings file which might
contain different words and constraints.
The calling process must have PRIVSYSTRANSLABEL in its
set of effective privileges to perform label translation on
labels that dominate the current process's sensitivity
SunOS 5.11 Last change: 20 Jul 2007 1
Trusted Extensions Library Functions sbltos(3TSOL)
label.
Process Attributes
If the VIEWEXTERNAL or VIEWINTERNAL flags are not speci-
fied, translation of ADMINLOW and ADMINHIGH labels is con-
trolled by the label view process attribute flags. If no
label view process attribute flags are defined, their trans-
lation is controlled by the label view configured in the
labelencodings file. A value of External specifies that
ADMINLOW and ADMINHIGH labels are mapped to the lowest and
highest labels defined in the labelencodings file. A value
of Internal specifies that the ADMINLOW and ADMINHIGH
labels are translated to the admin low name and admin high
name strings specified in the labelencodings file. If no
such names are specified, the strings "ADMINLOW" and
"ADMINHIGH" are used.
RETURN VALUES
These functions return a pointer to a statically allocated
string that contains the result of the translation, or (char
*)0 if the translation fails for any reason.
EXAMPLES
sbsltos()
Assume that a sensitivity label is:
UN TOP/MIDLE/LOWER DRAWER
When clipped to ten characters it is:
UN TOP/M<-
sbcleartos()
Assume that a clearance is:
UN TOP/MIDLE/LOWER DRAWER
When clipped to ten characters it is:
UN TOP/M<-
SunOS 5.11 Last change: 20 Jul 2007 2
Trusted Extensions Library Functions sbltos(3TSOL)
FILES
/etc/security/tsol/labelencodings
The label encodings file contains the classification
names, words, constraints, and values for the defined
labels of this system.
ATRIBUTES
See attributes(5) for descriptions of the following attri-
butes:
ATRIBUTE TYPE ATRIBUTE VALUE
Interface Stability Obsolete
MT-Level Unsafe
These functions are obsolete and retained for ease of port-
ing. They might be removed in a future Solaris Trusted
Extensions release. Use the labeltostr(3TSOL) function
instead.
SEE ALSO
labeltostr(3TSOL), libtsol(3LIB), attributes(5), labels(5)
WARNINGS
All these functions share the same statically allocated
string storage. They are not MT-Safe. Subsequent calls to
any of these functions will overwrite that string with the
newly translated string.
NOTES
The functionality described on this manual page is available
only if the system is configured with Trusted Extensions.
SunOS 5.11 Last change: 20 Jul 2007 3
|