diff options
author | chris <chris@FreeBSD.org> | 2002-10-18 05:40:48 +0000 |
---|---|---|
committer | chris <chris@FreeBSD.org> | 2002-10-18 05:40:48 +0000 |
commit | c132f92d2d707aafe812758e1981bb883d36100c (patch) | |
tree | d050b93fde2183c222dd2695a2764abd4dd4a04a /share/man/man9 | |
parent | 83e0636f5138964eefa30a99c27b20dbb7ae2623 (diff) | |
download | FreeBSD-src-c132f92d2d707aafe812758e1981bb883d36100c.zip FreeBSD-src-c132f92d2d707aafe812758e1981bb883d36100c.tar.gz |
Add a new man page describing the mac_bsdextended policy.
Obtained from: TrustedBSD Project
Sponsored by: DARPA, NAI Labs
Diffstat (limited to 'share/man/man9')
-rw-r--r-- | share/man/man9/Makefile | 1 | ||||
-rw-r--r-- | share/man/man9/mac_bsdextended.9 | 80 |
2 files changed, 81 insertions, 0 deletions
diff --git a/share/man/man9/Makefile b/share/man/man9/Makefile index 62e19bd..91a935b 100644 --- a/share/man/man9/Makefile +++ b/share/man/man9/Makefile @@ -48,6 +48,7 @@ MAN= BUF_LOCK.9 BUF_LOCKFREE.9 BUF_LOCKINIT.9 BUF_REFCNT.9 \ jumbo.9 \ kernacc.9 kobj.9 kthread.9 ktr.9 \ lock.9 \ + mac_bsdextended.9 \ make_dev.9 malloc.9 mbchain.9 mbuf.9 mdchain.9 \ mi_switch.9 microseq.9 microtime.9 microuptime.9 \ module.9 mtx_pool.9 mutex.9 \ diff --git a/share/man/man9/mac_bsdextended.9 b/share/man/man9/mac_bsdextended.9 new file mode 100644 index 0000000..3001fe3 --- /dev/null +++ b/share/man/man9/mac_bsdextended.9 @@ -0,0 +1,80 @@ +.\" Copyright (c) 2002 Networks Associates Technology, Inc. +.\" All rights reserved. +.\" +.\" This software was developed for the FreeBSD Project by Chris +.\" Costello at Safeport Network Services and NAI Labs, the Security +.\" Research Division of Network Associates, Inc. under DARPA/SPAWAR +.\" contract N66001-01-C-8035 ("CBOSS"), as part of the DARPA CHATS +.\" research program. +.\" +.\" Redistribution and use in source and binary forms, with or without +.\" modification, are permitted provided that the following conditions +.\" are met: +.\" 1. Redistributions of source code must retain the above copyright +.\" notice, this list of conditions and the following disclaimer. +.\" 2. Redistributions in binary form must reproduce the above copyright +.\" notice, this list of conditions and the following disclaimer in the +.\" documentation and/or other materials provided with the distribution. +.\" 3. The names of the authors may not be used to endorse or promote +.\" products derived from this software without specific prior written +.\" permission. +.\" +.\" THIS SOFTWARE IS PROVIDED BY THE AUTHORS AND CONTRIBUTORS ``AS IS'' AND +.\" ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE +.\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE +.\" ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHORS OR CONTRIBUTORS BE LIABLE +.\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL +.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS +.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) +.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT +.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY +.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF +.\" SUCH DAMAGE. +.\" +.\" $FreeBSD$ +.Dd OCTOBER 16, 2002 +.Dt MAC_BSDEXTENDED 9 +.Os +.Sh NAME +.\" .Cd options MAC_BSDEXTENDED +.Nm mac_bsdextended +.Nd mandatory rules regarding users and system objects +.Sh SYNOPSIS +.Li kldload mac_bsdextended +.Sh DESCRIPTION +The +.Nm +interface provides an interface for the system administrator +to impose mandatory rules regarding users and some system objects. +Rules are uploaded to the module +(typically using +.Xr libugidfw 3 ) +where they are stored internally +and used to determine whether to allow or deny specific accesses +(see +.Xr ugidfw 8 ) . +.Sh IMPLEMENTATION NOTES +While the traditional +.Xr mac 9 +entry points are implemented, +policy labels are not used; +instead, access control decisions are made by iterating through the internal +list of rules until a rule +which denies the particular access +is found, +or the end of the list is reached. +.Sh SEE ALSO +.Xr libugidfw 3 , +.Xr ugidfw 8 , +.Xr mac 9 +.Sh HISTORY +The +.Nm +interface was first introduced in +.Fx 5.0 . +.Sh AUTHORS +This software was contributed to the +.Fx +Project by NAI Labs, the Security Research Division of Network Associates +Inc. under DARPA/SPAWAR contract N66001-01-C-8035 ("CBOSS"), +as part of the DARPA CHATS research program. |