Administrators will need to log in as themselves and then assume one or more roles that they are authorized to perform. That also provides a better way to audit exactly who is doing what on the system. Administrators can provide users with specific rights that may be outside the normal security policies without giving unnecessary authorities in the process. You can also combine rights in a hierarchical manner using the Rights Manager Tool and create profiles that can be assigned to various users or multiple administrators who perform specific functions. Also useful is Trusted Solaris 8 s support for device allocation.
Administrators can set sensitivity labels for specific devices that allow or deny their use.
Even windowing activities can be controlled. For example, you might let some users copy and paste text, graphics or binary data between windows. They can preview the data being transferred, and you can log all activity that occurs between windows. Our work with Trusted Solaris 8 showed that it is flexible enough to support nearly any security requirement.