| mac.4 (111365) | mac.4 (112860) |
|---|---|
| 1.\" Copyright (c) 2003 Networks Associates Technology, Inc. 2.\" All rights reserved. 3.\" 4.\" This software was developed for the FreeBSD Project by Chris Costello 5.\" at Safeport Network Services and Network Associates Labs, the 6.\" Security Research Division of Network Associates, Inc. under 7.\" DARPA/SPAWAR contract N66001-01-C-8035 ("CBOSS"), as part of the 8.\" DARPA CHATS research program. --- 14 unchanged lines hidden (view full) --- 23.\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 24.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 25.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 26.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 27.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 28.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 29.\" SUCH DAMAGE. 30.\" | 1.\" Copyright (c) 2003 Networks Associates Technology, Inc. 2.\" All rights reserved. 3.\" 4.\" This software was developed for the FreeBSD Project by Chris Costello 5.\" at Safeport Network Services and Network Associates Labs, the 6.\" Security Research Division of Network Associates, Inc. under 7.\" DARPA/SPAWAR contract N66001-01-C-8035 ("CBOSS"), as part of the 8.\" DARPA CHATS research program. --- 14 unchanged lines hidden (view full) --- 23.\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 24.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 25.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 26.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 27.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 28.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 29.\" SUCH DAMAGE. 30.\" |
| 31.\" $FreeBSD: head/share/man/man4/mac.4 111365 2003-02-23 21:47:03Z chris $ | 31.\" $FreeBSD: head/share/man/man4/mac.4 112860 2003-03-31 08:08:59Z chris $ |
| 32.Dd JANUARY 8, 2003 33.Os 34.Dt MAC 4 35.Sh NAME 36.Nm mac 37.Nd Mandatory Access Control 38.Sh SYNOPSIS 39.Cd "options MAC" --- 13 unchanged lines hidden (view full) --- 53.It Sy Name Ta Sy Description Ta Sy Labeling Ta Sy "Load time" 54.It Xr mac_biba 4 Ta "Biba integrity policy" Ta yes Ta boot only 55.It Xr mac_bsdextended 4 Ta "File system firewall" Ta no Ta any time 56.It Xr mac_ifoff 4 Ta "Interface silencing" Ta no Ta any time 57.It Xr mac_lomac 4 Ta "Low-Watermark MAC policy" Ta yes Ta boot only 58.It Xr mac_mls 4 Ta "Confidentiality policy" Ta yes Ta boot only 59.It Xr mac_none 4 Ta "Sample no-op policy" Ta no Ta any time 60.It Xr mac_partition 4 Ta "Process partition policy" Ta yes Ta any time | 32.Dd JANUARY 8, 2003 33.Os 34.Dt MAC 4 35.Sh NAME 36.Nm mac 37.Nd Mandatory Access Control 38.Sh SYNOPSIS 39.Cd "options MAC" --- 13 unchanged lines hidden (view full) --- 53.It Sy Name Ta Sy Description Ta Sy Labeling Ta Sy "Load time" 54.It Xr mac_biba 4 Ta "Biba integrity policy" Ta yes Ta boot only 55.It Xr mac_bsdextended 4 Ta "File system firewall" Ta no Ta any time 56.It Xr mac_ifoff 4 Ta "Interface silencing" Ta no Ta any time 57.It Xr mac_lomac 4 Ta "Low-Watermark MAC policy" Ta yes Ta boot only 58.It Xr mac_mls 4 Ta "Confidentiality policy" Ta yes Ta boot only 59.It Xr mac_none 4 Ta "Sample no-op policy" Ta no Ta any time 60.It Xr mac_partition 4 Ta "Process partition policy" Ta yes Ta any time |
| 61.It Xr mac_portacl 4 Ta "Port bind(2) access control" Ta no Ta any time |
|
| 61.It Xr mac_seeotheruids 4 Ta "See-other-UIDs policy" Ta no Ta any time 62.It Xr mac_test 4 Ta "MAC testing policy" Ta no Ta any time 63.El 64.Ss MAC Labels 65Each system subject (processes, sockets, etc.) and each system object 66(file system objects, sockets, etc.) can carry with it a MAC label. 67MAC labels contain data in an arbitrary format 68taken into consideration in making access control decisions --- 175 unchanged lines hidden (view full) --- 244.Xr mac 3 , 245.Xr mac_biba 4 , 246.Xr mac_bsdextended 4 , 247.Xr mac_ifoff 4 , 248.Xr mac_lomac 4 , 249.Xr mac_mls 4 , 250.Xr mac_none 4 , 251.Xr mac_partition 4 , | 62.It Xr mac_seeotheruids 4 Ta "See-other-UIDs policy" Ta no Ta any time 63.It Xr mac_test 4 Ta "MAC testing policy" Ta no Ta any time 64.El 65.Ss MAC Labels 66Each system subject (processes, sockets, etc.) and each system object 67(file system objects, sockets, etc.) can carry with it a MAC label. 68MAC labels contain data in an arbitrary format 69taken into consideration in making access control decisions --- 175 unchanged lines hidden (view full) --- 245.Xr mac 3 , 246.Xr mac_biba 4 , 247.Xr mac_bsdextended 4 , 248.Xr mac_ifoff 4 , 249.Xr mac_lomac 4 , 250.Xr mac_mls 4 , 251.Xr mac_none 4 , 252.Xr mac_partition 4 , |
| 253.Xr mac_portacl 4 , |
|
| 252.Xr mac_seeotheruids 4 , 253.Xr mac_test 4 , 254.Xr login.5 , 255.Xr maclabel 7 , 256.Xr getfmac 8 , 257.Xr setfmac 8 , 258.Xr getpmac 8 , 259.Xr setpmac 8 , --- 31 unchanged lines hidden --- | 254.Xr mac_seeotheruids 4 , 255.Xr mac_test 4 , 256.Xr login.5 , 257.Xr maclabel 7 , 258.Xr getfmac 8 , 259.Xr setfmac 8 , 260.Xr getpmac 8 , 261.Xr setpmac 8 , --- 31 unchanged lines hidden --- |