diff options
| author | rwatson <rwatson@FreeBSD.org> | 2002-10-23 23:36:26 +0000 |
|---|---|---|
| committer | rwatson <rwatson@FreeBSD.org> | 2002-10-23 23:36:26 +0000 |
| commit | cc8a28916f437e6be6e44f694b7caf6e8ffa1d88 (patch) | |
| tree | db7c264aacd5496da285760f708afa1ed651d8b3 /sys/modules | |
| parent | 435bfdfa4436731362eb9fac66643198e6e238e4 (diff) | |
| download | FreeBSD-src-cc8a28916f437e6be6e44f694b7caf6e8ffa1d88.zip FreeBSD-src-cc8a28916f437e6be6e44f694b7caf6e8ffa1d88.tar.gz | |
Provide a simple sample labeled access control policy, mac_partition.
This policy can be loaded dynamically, and assigns each process a
partition number, as well as permitting processes to operate outside
the partition. Processes contained in a partition can only "see"
processes inside the same partition, so it's a little like jail.
The partition of a user can be set using the label mechanisms in
login.conf. This sample policy is a good starting point for developers
wanting to learn about how to produce labeled policies, as it labels
only one kernel object, the process credential.
PR:
Submitted by:
Reviewed by:
Approved by:
Obtained from: TrustedBSD Project
Sponsored by: DARPA, Network Associates Laboratories
Diffstat (limited to 'sys/modules')
| -rw-r--r-- | sys/modules/Makefile | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/sys/modules/Makefile b/sys/modules/Makefile index 1176cec..c2546f7 100644 --- a/sys/modules/Makefile +++ b/sys/modules/Makefile @@ -68,6 +68,7 @@ SUBDIR= 3dfx \ mac_ifoff \ mac_mls \ mac_none \ + mac_partition \ mac_seeotheruids \ mac_test \ mcd \ |
