tnchkdb(1m) [opensolaris man page]

tnchkdb(1M)						  System Administration Commands					       tnchkdb(1M)

NAME

       tnchkdb - check file syntax of trusted network databases

SYNOPSIS

       /usr/sbin/tnchkdb  [-h path] [-t path] [-z path]

DESCRIPTION

       tnchkdb checks the syntax of the tnrhtp, tnrhdb, and tnzonecfg databases. By default, the path for each file is:

	   o	  /etc/security/tsol/tnrhtp

	   o	  /etc/security/tsol/tnrhdb

	   o	  /etc/security/tsol/tnzonecfg

       You  can  specify  an  alternate  path for any or all of the files by specifying that path on the command line by using the -h (tnrhdb), -t
       (tnrhtp) and -z (tnzonecfg) options. The options are useful when testing a set of modified files before installing the files as new  system
       databases.

       All  three  database files are checked for integrity. tnchkdb returns an exit status of 0 if all of the files are syntactically and, to the
       extent possible, semantically correct. If one or more files have errors, then an exit status of 1 is returned. If there	are  command  line
       problems, such as an unreadable file, an exit status of 2 is returned. Errors are written to standard error.

       To avoid cascading errors, when there are errors in tnrhtp, the template names in tnrhdb are not validated.

       tnchkdb can be run at any label, but the standard /etc/security/tsol files are visible only in the global zone.

OPTIONS

       -h [ path ]    Check path for proper tnrhdb syntax. If path is not specified, then check /etc/security/tsol/tnrhdb.

       -t [ path ]    Check path for proper tnrhtp syntax. If path is not specified, then check /etc/security/tsol/tnrhtp.

       -z [ path ]    Check path for proper tnzonecfg syntax. If path is not specified, then check /etc/security/tsol/tnzonecfg.

EXAMPLES

       Example 1 Sample Error Message

       The  tnchkdb  command checks for CIPSO errors. In this example, the admin_low template has an incorrect value of ADMIN_HIGH for its default
       label.

	 # tnchkdb
	 checking /etc/security/tsol/tnrhtp ...
	 tnchkdb: def_label classification 7fff is invalid for cipso labels:
	 line 14 entry admin_low
	 tnchkdb: def_label compartments 241-256 must be zero for cipso labels:
	 line 14 entry admin_low
	 checking /etc/security/tsol/tnrhdb ...
	 checking /etc/security/tsol/tnzonecfg ...

FILES

       /etc/security/tsol/tnrhdb

	   Trusted network remote-host database

       /etc/security/tsol/tnrhtp

	   Trusted network remote-host templates

       /etc/security/tsol/tnzonecfg

	   Trusted zone configuration database

ATTRIBUTES

       See attributes(5) for descriptions of the following attributes:

       +-----------------------------+-----------------------------+
       |      ATTRIBUTE TYPE	     |	    ATTRIBUTE VALUE	   |
       +-----------------------------+-----------------------------+
       |Availability		     |SUNWtsu			   |
       +-----------------------------+-----------------------------+
       |Interface Stability	     |See below.		   |
       +-----------------------------+-----------------------------+

       The command line is Committed. The output is Uncommitted.

SEE ALSO

       tnd(1M), tnctl(1M), attributes(5)

       How to Check the Syntax of Trusted Network Databases in Solaris Trusted Extensions Administrator's Procedures

NOTES

       The functionality described on this manual page is available only if the system is configured with Trusted Extensions.

       It is possible to have inconsistent but valid configurations of tnrhtp and tnrhdb when LDAP is used to supply missing templates.

SunOS 5.11							    20 Jul 2007 						       tnchkdb(1M)

Check Out this Related Man Page

bltocolor(3TSOL)				       Trusted Extensions Library Functions					  bltocolor(3TSOL)

NAME

       bltocolor, bltocolor_r - get character-coded color name of label

SYNOPSIS

       cc [flag...] file... -ltsol [library...]

       #include <tsol/label.h>

       char *bltocolor(const m_label_t *label);

       char *bltocolor_r(const m_label_t *label, const int size,
	    char *color_name);

DESCRIPTION

       The bltocolor() and bltocolor_r() functions get the character-coded color name associated with the binary label label.

       The  calling  process must have PRIV_SYS_TRANS_LABEL in its set of effective privileges to get color names of labels that dominate the cur-
       rent process's sensitivity label.

RETURN VALUES

       The bltocolor() function returns a pointer to a statically allocated string that contains the character-coded color name specified for  the
       label or returns (char *)0 if, for any reason, no character-coded color name is available for this binary label.

       The bltocolor_r() function returns a pointer to the color_name string which contains the character-coded color name specified for the label
       or returns (char *)0 if, for any reason, no character-coded color name is available for this binary label. color_name must  provide  for  a
       string of at least size characters.

FILES

       /etc/security/tsol/label_encodings

	   The label encodings file contains the classification names, words, constraints, and values for the defined labels of this system.

ATTRIBUTES

       See attributes(5) for descriptions of the following attributes:

       +-----------------------------+-----------------------------+
       |      ATTRIBUTE TYPE	     |	    ATTRIBUTE VALUE	   |
       +-----------------------------+-----------------------------+
       |Interface Stability	     |Obsolete			   |
       +-----------------------------+-----------------------------+
       |MT-Level		     |MT-Safe with exceptions	   |
       +-----------------------------+-----------------------------+

       These  functions  are  obsolete and retained for ease of porting. They might be removed in a future Solaris Trusted Extensions release. Use
       the label_to_str(3TSOL) function instead.

       The bltocolor() function returns a pointer to a statically allocated string. Subsequent calls to it will overwrite that string with  a  new
       character-coded color name. It is not MT-Safe. The bltocolor_r() function should be used in multithreaded applications.

SEE ALSO

       label_to_str(3TSOL), libtsol(3LIB), attributes(5)

NOTES

       The functionality described on this manual page is available only if the system is configured with Trusted Extensions.

       If label includes a specified word or words, the character-coded color name associated with the first word specified in the label encodings
       file is returned. Otherwise, if no character-coded color name is specified for label, the first character-coded color name specified in the
       label encodings file with the same classification as the binary label is returned.

SunOS 5.11							    20 Jul 2007 						  bltocolor(3TSOL)

Linux and UNIX Man Pages

tnchkdb(1m) [opensolaris man page]

Check Out this Related Man Page