1.\" Copyright (c) 2002 Networks Associates Technology, Inc.
2.\" All rights reserved.
3.\"
4.\" This software was developed for the FreeBSD Project by Chris
5.\" Costello at Safeport Network Services and NAI Labs, the Security
6.\" Research Division of Network Associates, Inc. under DARPA/SPAWAR
7.\" contract N66001-01-C-8035 ("CBOSS"), as part of the DARPA CHATS
8.\" research program.
9.\"
10.\" Redistribution and use in source and binary forms, with or without
11.\" modification, are permitted provided that the following conditions
12.\" are met:
13.\" 1. Redistributions of source code must retain the above copyright
14.\" notice, this list of conditions and the following disclaimer.
15.\" 2. Redistributions in binary form must reproduce the above copyright
16.\" notice, this list of conditions and the following disclaimer in the
17.\" documentation and/or other materials provided with the distribution.
18.\"
19.\" THIS SOFTWARE IS PROVIDED BY THE AUTHORS AND CONTRIBUTORS ``AS IS'' AND
20.\" ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
21.\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
22.\" ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHORS OR CONTRIBUTORS BE LIABLE
23.\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
24.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
25.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
26.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
27.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
28.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
29.\" SUCH DAMAGE.
30.\"
| 1.\" Copyright (c) 2002 Networks Associates Technology, Inc.
2.\" All rights reserved.
3.\"
4.\" This software was developed for the FreeBSD Project by Chris
5.\" Costello at Safeport Network Services and NAI Labs, the Security
6.\" Research Division of Network Associates, Inc. under DARPA/SPAWAR
7.\" contract N66001-01-C-8035 ("CBOSS"), as part of the DARPA CHATS
8.\" research program.
9.\"
10.\" Redistribution and use in source and binary forms, with or without
11.\" modification, are permitted provided that the following conditions
12.\" are met:
13.\" 1. Redistributions of source code must retain the above copyright
14.\" notice, this list of conditions and the following disclaimer.
15.\" 2. Redistributions in binary form must reproduce the above copyright
16.\" notice, this list of conditions and the following disclaimer in the
17.\" documentation and/or other materials provided with the distribution.
18.\"
19.\" THIS SOFTWARE IS PROVIDED BY THE AUTHORS AND CONTRIBUTORS ``AS IS'' AND
20.\" ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
21.\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
22.\" ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHORS OR CONTRIBUTORS BE LIABLE
23.\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
24.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
25.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
26.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
27.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
28.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
29.\" SUCH DAMAGE.
30.\"
|
31.\" $FreeBSD: head/usr.sbin/setfmac/setfmac.8 107744 2002-12-11 15:55:29Z ru $
| 31.\" $FreeBSD: head/usr.sbin/setfmac/setfmac.8 107788 2002-12-12 17:26:04Z ru $
|
32.Dd June 27, 2002
33.Dt SETFMAC 8
34.Os
35.Sh NAME
36.Nm setfmac ,
37.Nm setfsmac
38.Nd set MAC label for a file system object
39.Sh SYNOPSIS
40.Nm setfmac
41.Op Fl hR
42.Ar label
43.Ar
44.Nm setfsmac
45.Op Fl ehvx
46.Op Fl f Ar specfile
47.Op Fl s Ar specfile
48.Ar
49.Sh DESCRIPTION
50The
51.Nm setfmac
52utility assigns the specified MAC label to the specified files.
53The following options are available:
54.Bl -tag -width indent
55.It Fl R
56Set the labels on the file hierarchies rooted in the files instead of
57just the files themselves.
58.It Fl h
59If the file is a symbolic link, change the label of the link rather
60than the file that the link points to.
61.El
62.Pp
63The
64.Nm setfsmac
65utility accepts a list of specification files as input and sets the MAC
66labels on the specified file system hierarchies.
67Path names specified will be visited in order as given on the command line,
68and each tree will be traversed in pre-order.
69(Generally, it will not be very useful to use relative, instead of absolute,
70paths.)
71The labels that match a file will be combined and set in a single
72transaction.
73.Pp
74The following options are available:
75.Bl -tag -width indent
76.It Fl e
| 32.Dd June 27, 2002
33.Dt SETFMAC 8
34.Os
35.Sh NAME
36.Nm setfmac ,
37.Nm setfsmac
38.Nd set MAC label for a file system object
39.Sh SYNOPSIS
40.Nm setfmac
41.Op Fl hR
42.Ar label
43.Ar
44.Nm setfsmac
45.Op Fl ehvx
46.Op Fl f Ar specfile
47.Op Fl s Ar specfile
48.Ar
49.Sh DESCRIPTION
50The
51.Nm setfmac
52utility assigns the specified MAC label to the specified files.
53The following options are available:
54.Bl -tag -width indent
55.It Fl R
56Set the labels on the file hierarchies rooted in the files instead of
57just the files themselves.
58.It Fl h
59If the file is a symbolic link, change the label of the link rather
60than the file that the link points to.
61.El
62.Pp
63The
64.Nm setfsmac
65utility accepts a list of specification files as input and sets the MAC
66labels on the specified file system hierarchies.
67Path names specified will be visited in order as given on the command line,
68and each tree will be traversed in pre-order.
69(Generally, it will not be very useful to use relative, instead of absolute,
70paths.)
71The labels that match a file will be combined and set in a single
72transaction.
73.Pp
74The following options are available:
75.Bl -tag -width indent
76.It Fl e
|
77Treat any filesystems encountered which do not support MAC labelling as
| 77Treat any file systems encountered which do not support MAC labelling as
|
78errors, instead of warning and skipping past them.
79.It Fl f Ar specfile
80Add the specifications in
81.Ar specfile
82as a set of which at most one will be applied to each file traversed per
83.Fl f Ar specfile
84given.
85.It Fl h
86If the file is a symbolic link, change the label of the link rather
87than the file that the link points to.
88.It Fl s Ar specfile
89Add the specification in
90.Ar specfile ,
91but assume that the specification format is that used in the port
92of
93.Tn SELinux
94to
95.Fx ,
96.Tn SEBSD .
97At most one of the specifications will be applied to each file traversed per
98.Fl f Ar specfile
99given.
100The prefix
101.Dq Li sebsd/
102will automatically be prepended to the labels in this file, and labels
103matching
104.Dq Li <<none>>
105will be explicitly not relabeled.
106This permits SEBSD to re-use existing
107.Tn SELinux
108policy specification files
109unmodified.
110.It Fl v
111Increase the degree of verbosity.
112When given, information detailing the labelling operation is printed while
113in progress.
114.It Fl x
| 78errors, instead of warning and skipping past them.
79.It Fl f Ar specfile
80Add the specifications in
81.Ar specfile
82as a set of which at most one will be applied to each file traversed per
83.Fl f Ar specfile
84given.
85.It Fl h
86If the file is a symbolic link, change the label of the link rather
87than the file that the link points to.
88.It Fl s Ar specfile
89Add the specification in
90.Ar specfile ,
91but assume that the specification format is that used in the port
92of
93.Tn SELinux
94to
95.Fx ,
96.Tn SEBSD .
97At most one of the specifications will be applied to each file traversed per
98.Fl f Ar specfile
99given.
100The prefix
101.Dq Li sebsd/
102will automatically be prepended to the labels in this file, and labels
103matching
104.Dq Li <<none>>
105will be explicitly not relabeled.
106This permits SEBSD to re-use existing
107.Tn SELinux
108policy specification files
109unmodified.
110.It Fl v
111Increase the degree of verbosity.
112When given, information detailing the labelling operation is printed while
113in progress.
114.It Fl x
|
115Do not cross recurse into new filesystems when traversing them.
| 115Do not cross recurse into new file systems when traversing them.
|
116.El
117.Sh SEE ALSO
118.Xr mac 3 ,
119.Xr mac_set_file 3 ,
120.Xr mac_set_link 3 ,
121.Xr re_format 7 ,
122.Xr getfmac 8 ,
123.Xr mac 9
| 116.El
117.Sh SEE ALSO
118.Xr mac 3 ,
119.Xr mac_set_file 3 ,
120.Xr mac_set_link 3 ,
121.Xr re_format 7 ,
122.Xr getfmac 8 ,
123.Xr mac 9
|