Summary of Removed Trusted Solaris Features

Because of changes to the architecture, the following Trusted Solaris 8 features do not exist in Trusted Extensions. For a list of interface changes, see Appendix A, Interface Changes in the Solaris Trusted Extensions Release.

• Forced and allowed privileges

• Selected GUIs

  • Dialog boxes for setting privileges and labels in the File Manager

  • Enable Logins GUI

  • Password generator GUI

• Kernel switch settings in /etc/system file

  tsol_hide_upgraded_names	tsol_clean_windows
  tsol_privs_debug	tsol_flush_buffers

• Label and privilege attributes in ufs and tmpfs inodes

• Mail delivery exceptions in sendmail.cf and the Rights tool

  #0 LabelTooLow=return	tsoltoolowreturn
  #0 LabelAdminLow=upgrade	tsoladminlowupgrade

• Network labeling protocols – tsol, tsix, and ripso labels

• Multilevel directory adornments, including MLDs and SLDs

• NIS+ naming service for a Trusted Extensions domain

• Packaging utilities, such as tsolinfo file

• Trusted Solaris extensions to file system commands (Trusted NFS)

• System_Admin actions for NIS+

• tnidb database

• t6 API

• vfstab_adjunct file

Because of changes to the architecture, the following Trusted Solaris 8 features are visibly different in Trusted Extensions.

• Privileges are called by name, not by number

• Window label Trusted Path replaces ADMIN_LOW and ADMIN_HIGH

• Trusted Path workspaces are used for ADMIN_LOW and ADMIN_HIGH tasks

• Label attributes are not placed in exec_attr

• tsol policy entry is not used in exec_attr