mac_mls.4 (107717) | mac_mls.4 (107735) |
---|---|
1.\" Copyright (c) 2002 Networks Associates Technology, Inc. 2.\" All rights reserved. 3.\" 4.\" This software was developed for the FreeBSD Project by Chris 5.\" Costello at Safeport Network Services and Network Associates Labs, 6.\" the Security Research Division of Network Associates, Inc. under 7.\" DARPA/SPAWAR contract N66001-01-C-8035 ("CBOSS"), as part of the 8.\" DARPA CHATS research program. --- 14 unchanged lines hidden (view full) --- 23.\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 24.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 25.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 26.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 27.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 28.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 29.\" SUCH DAMAGE. 30.\" | 1.\" Copyright (c) 2002 Networks Associates Technology, Inc. 2.\" All rights reserved. 3.\" 4.\" This software was developed for the FreeBSD Project by Chris 5.\" Costello at Safeport Network Services and Network Associates Labs, 6.\" the Security Research Division of Network Associates, Inc. under 7.\" DARPA/SPAWAR contract N66001-01-C-8035 ("CBOSS"), as part of the 8.\" DARPA CHATS research program. --- 14 unchanged lines hidden (view full) --- 23.\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 24.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 25.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 26.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 27.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 28.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 29.\" SUCH DAMAGE. 30.\" |
31.\" $FreeBSD: head/share/man/man4/mac_mls.4 107717 2002-12-10 00:39:17Z chris $ | 31.\" $FreeBSD: head/share/man/man4/mac_mls.4 107735 2002-12-11 01:02:26Z chris $ |
32.Dd DECEMBER 1, 2002 33.Os 34.Dt MAC_MLS 4 35.Sh NAME 36.Nm mac_mls 37.Nd Multi-Level Security confidentiality policy 38.Sh SYNOPSIS 39To compile MLS into your kernel, place the following lines in your kernel --- 129 unchanged lines hidden (view full) --- 169policy relies on superuser status 170.Xr ( suser 9 ) 171in order to change network interface MLS labels. 172This will eventually go away, but it is currently a liability and may 173allow the superuser to bypass MLS protections. 174.Sh SEE ALSO 175.Xr mac_biba 4 , 176.Xr mac_bsdextended 4 , | 32.Dd DECEMBER 1, 2002 33.Os 34.Dt MAC_MLS 4 35.Sh NAME 36.Nm mac_mls 37.Nd Multi-Level Security confidentiality policy 38.Sh SYNOPSIS 39To compile MLS into your kernel, place the following lines in your kernel --- 129 unchanged lines hidden (view full) --- 169policy relies on superuser status 170.Xr ( suser 9 ) 171in order to change network interface MLS labels. 172This will eventually go away, but it is currently a liability and may 173allow the superuser to bypass MLS protections. 174.Sh SEE ALSO 175.Xr mac_biba 4 , 176.Xr mac_bsdextended 4 , |
177.Xr mac_ifoff 4 , |
|
177.Xr mac_mls 4 , 178.Xr mac_none 4 , | 178.Xr mac_mls 4 , 179.Xr mac_none 4 , |
180.Xr mac_partition 4 , |
|
179.Xr mac_seeotheruids 4 , 180.Xr mac_test 4 181.Xr maclabel 7 , 182.Xr mac 9 183.Sh HISTORY 184The 185.Nm 186policy module first appeared in --- 21 unchanged lines hidden --- | 181.Xr mac_seeotheruids 4 , 182.Xr mac_test 4 183.Xr maclabel 7 , 184.Xr mac 9 185.Sh HISTORY 186The 187.Nm 188policy module first appeared in --- 21 unchanged lines hidden --- |