Current Position:Home > Multi-label desktops not starting (Solaris 10u9)

Multi-label desktops not starting (Solaris 10u9)

Update:11-30Source: network consolidation
Advertisement
I'm attempting to create a multi-label trusted JDS desktop setup, where each workspace is tied to a specific label, which is in turn associated with a specific zone. I'm starting out simple and just creating one label and one non-global zone. I'm able to have the zone autoboot, use "smc" to associate the zone with the label, and set a workspace to that particular label. However, the desktop does not show up in that workspace. All I get is a background with the color that I've assigned to that particular label.
I can start nautilus manually from within the zone after setting DISPLAY to ":0.0", and the desktop will show up in the workspace. However the desktop running in the global zone seems to use the same configuration files as the non-global zone (i.e. if I change the background in one workspace, the other changes as well). I'm also unable to use "gnome-panel" to run any apps in the non-global zone from the Launch menu.
I'm using Solaris 10u9. Seems like there is something rudimentary and simple that I'm missing. I've been at this for way too long and it's driving me nuts. Thanks for the help!

The Best Answer

Advertisement
Answers to your questions:
What zonename and label did you use for your non-global zone?test
Can you cat'n'paste your /etc/security/tsol/tnzonecfg ?global:ADMIN_LOW:1:111/tcp;111/udp;515/tcp;631/tcp;2049/tcp;6000-6003/tcp:6000-6003/tcp
test:0x000a-08-:1::
Do you get the question about which level to use when you login? Yes. I'm logging in as root, which is at the ADMIN_HIGH level.
What rights does the user you are logging in with have in /etc/user_attr ?root::::auths=solaris.*,solaris.grant;profiles=Web Console Management,All;lock_after_retries=no;min_label=admin_low;clearance=admin_high
Lastly, did you edit /etc/security/tsol/label_encodings and verified that the zones are up and running properly?Yes, I've modified the label_encodings file as follows:
VERSION= MLS Configuration
ClASSIFICATIONS:
name= TEST; sname= T; value= 10;
INFORMATION LABELS:
WORDS:
REQUIRED COMBINATIONS:
COMBINATION CONSTRAINTS:
SENSITIVITY LABELS:
WORDS:
REQUIRED COMBINATIONS:
COMBINATION CONSTRAINTS:
CLEARANCES:
WORDS:
REQUIRED COMBINATIONS:
COMBINATION CONSTRAINTS:
CHANNELS:
WORDS:
PRINTER BANNERS:
WORDS:
ACCREDITATION RANGE:
classification= t; all compartment combinations valid;
minimum clearance= t;
minimum sensitivity label= t;
minimum protect as classification= t;
LOCAL DEFINITIONS:
Classification Name= Class;
Compartments Name= Comp;
Default User Sensitivity Label= t;
Default User Clearance= t;
COLOR NAMES:
label= Admin_Low; color= #bdbdbd;
label= t; color= red;
label= Admin_High; color= #636363;
Thanks for the response!
  • Multi-label desktops not starting (Solaris 10u9) Update:11-30

    I'm attempting to create a multi-label trusted JDS desktop setup, where each workspace is tied to a specific label, which is in turn associated with a specific zone. I'm starting out simple and just creating one label and one non-global zone. I'm abl

  • Installation of solaris-10u9-x86-oracle-db-11gr2.bin Update:11-30

    hi how do i install solaris-10u9-x86-oracle-db-11gr2.bin? is it any OVM template? what this .bin is containing actually ? kind regardsThe first thing most of us do is download and read the installation documents. That is what I recommend you do too.

  • Home Desktop Paths in Solaris 11 Update:11-30

    Hello Admins, I work at the Oracle Broomfield CO campus. I tested Solaris 11 on my office Solaris 10 workstation using VirtualBox to see if DNS and NIS could be properly configured to work in our infrastructure before I installed Solaris 11 as the de

  • How to start graphical desktop GUI from solaris console login? Update:11-30

    I installed successfully Solaris 11 Express. However after Restart only the solaris console login prompt appears. How can I manually start the graphical desktop GUI from console login? How can I start always automatically the graphical desktop GUI fr

  • Cannot label 6Terabyte lun on solaris 8 host Update:11-30

    Hello, I have a 6 terabyte lun, I cannot label it. I get the following error: Warning: error writing VTOC. This is an emcpower device. The os is solaris 8 117350-26. -- Milo A.Been there tried that.....Solaris 8 will only support up to 1TB. You must

  • Resources on building multi-resolution desktop games? Update:11-30

    Hi, I'm currently working on a game and was wondering if it was at all possible to build an Adobe AIR desktop game that has multi resolution handling. For instance, when you boot up Binding of Issac, or any other desktop game, in the settings page yo

  • Robohelp 10 Multi Screen Desktop output Search Results not coming up in IE8 Update:10-11

    Hi, 1) We are using Mutli Screen Desktop layout in Robohelp 10 project. While I understand that the output is not fully compatible with IE8, but in this case I am facing a show stopper issue that search results do not come up. They are coming fine in

  • Calculating Kernel parameters for Oracle 11g R2 db on solaris 10u9 Update:11-30

    Hi Everyone, I have query regarding calculating the kernel parameters for deploying oracle 11g R2 db on solaris 10 v 5.10 update 09 machine , we have Ram size of 64gb. My question is how to calculate shared memory ,shared memory identifiers,semaphore

  • Assigning Dock items to multi screen desktops on Mission Control (ML) Update:11-30

    Right so I've recently bought a new rMBP.  I use it both in my studio where I hook it up to a Samsung external monitor which works fine, and outside in various offices and other locations. On my previous MBP, which was running Snow Leopard, I used Sp

  • Installation fails on Solaris 10 Update:10-11

    After downloading and executing the SGD shell script results in a failure. Same script worked fine on Solaris 9. Solaris 10 system details: root[csh]@broncos15[32]# cat /etc/release Solaris 10 3/05 s10_74L2a SPARC Assembled 22 January 2005 root[csh]@