I think you will find that the default label encodings file doesn't support the scenario described for user 3. You will need to have either "CONFIDENTIAL or PUBLIC specified as the user's min_label.
--Glenn Bart Blanquart wrote: >> How do I restrict a local user to access specific zones?. >> >> For example I want to have three users on my TX box who would be >> able to >> login to TX box using Sun Rays but would like to have them access to >> different >> zones but not all. >> >> user1 : Access to public and internal zones >> user2 : Access to public,internal and needtoknow zones >> user3 : Access to needtoknow and internal >> user3 : Access to all zones >> > > You can do this by setting the user's label range: http:// > docs.sun.com/app/docs/doc/819-0872/6n394pliu?a=view > > Bart > _______________________________________________ > security-discuss mailing list > security-discuss at opensolaris.org >
