View source for Solaris Trusted Extensions

{{Short description|Security extensions for Solaris operating system}}
'''Solaris Trusted Extensions''' is a set of security extensions incorporated in the Solaris 10 [[Operating system|operating system]] by [[Company:Sun Microsystems|Sun Microsystems]], featuring a [[Mandatory access control|mandatory access control]] model.  It succeeds '''[[Trusted Solaris]]''', a family of security-evaluated operating systems based on earlier versions of [[Software:Solaris (operating system)|Solaris]].

Solaris 10 5/09 is [[Common Criteria]] certified at [[Evaluation Assurance Level]] EAL4+ against the CAPP, RBACPP, and LSPP protection profiles.<ref name="securitycert">{{cite web
  |url = http://sun.com/software/security/securitycert/
  |title = Solaris Common Criteria Certification
  |accessdate = 2010-01-31
  |publisher = [[Company:Sun Microsystems|Sun Microsystems]]
}}</ref>

==Overview==
Certain Trusted Solaris features, such as fine-grained privileges, are now part of the standard Solaris 10 release. Beginning with Solaris 10 11/06, Solaris now includes a component called Solaris Trusted Extensions which gives it the additional features necessary to position it as the successor to Trusted Solaris. Inclusion of these features in the mainstream Solaris release marks a significant change from Trusted Solaris, as it is no longer necessary to use a different Solaris release with a modified kernel for labeled security environments. Solaris Trusted Extensions is an [[Software:OpenSolaris|OpenSolaris]] project.

Trusted Extensions additions and enhancements include:
*Accounting
*Role-Based Access Control
*Auditing
*Device Allocation
*Mandatory Access Control Labeling

Solaris Trusted Extensions enforce a mandatory access control policy on all aspects of the operating system, including device access, file, networking, print and window management services. This is achieved by adding sensitivity labels to objects, thereby establishing explicit relationships between these objects. Only appropriate (and explicit) authorization allows applications and users read and/or write access to the objects.

The component also provides labeled security features in a desktop environment. Apart from extending support for the [[Software:Common Desktop Environment|Common Desktop Environment]] from the Trusted Solaris 8 release, it delivers the first labeled environment based on [[Software:GNOME|GNOME]].<ref name="gnometrusted">{{cite web
  | title = Solaris Trusted Extensions Data Sheet
  | publisher = [[Company:Sun Microsystems|Sun Microsystems]]
  | url = http://www.sun.com/software/solaris/ds/trusted_extensions.jsp#3
  | accessdate = 2007-04-02}}
</ref> Solaris Trusted Extensions facilitate the access of data at multiple classification levels through a single desktop environment.

Solaris Trusted Extensions also delivers labeled device access and labeled network communication (through the CIPSO standard).
CIPSO is used to pass security information within and between labeled zones.
Solaris Trusted Extensions complies with the Federal Information Processing Standard (FIPS).

==Trusted Solaris history==
*1999 Trusted Solaris 7
*1996 Trusted Solaris 2.5.1 - ITSEC Certified for E3 / F-B1
*1995 Trusted Solaris 1.2 - ITSEC Certified for E3 / F-B1
*1992 SunOS Compartmented Mode Workstation 1.0 - ITSEC Certified for E3 / F-B1
*1990 SunOS Multilevel Security 1.0 - TCSEC Conformance (1985 Orange Book)

==References==
{{reflist}}

==External links==
* [http://www.sun.com/software/solaris/ds/trusted_extensions.jsp Solaris Trusted Extensions] Official Website
* [https://web.archive.org/web/20090902040618/http://www.opensolaris.org/os/community/security/projects/tx/ OpenSolaris: Solaris Trusted Extensions project]
* [http://www.sun.com/smi/Press/sunflash/2006-02/sunflash.20060214.3.xml Solaris Trusted Extensions press release]
* {{dmoz|Computers/Software/Operating_Systems/Unix/Solaris|Solaris}}


{{Solaris}}


[[Category:Operating system security]]
[[Category:Proprietary operating systems]]

{{Sourceattribution|Solaris Trusted Extensions}}