diff options
| author | csjp <csjp@FreeBSD.org> | 2005-09-18 03:15:36 +0000 |
|---|---|---|
| committer | csjp <csjp@FreeBSD.org> | 2005-09-18 03:15:36 +0000 |
| commit | 6216087b31d157089087e7d8cbe21835e4c700a9 (patch) | |
| tree | a7c703f3e72b68efad2db170c081434fe3fdcbbf /sys/powerpc | |
| parent | 0cc2091b50692c87aaca94f70e6640ed13044139 (diff) | |
| download | FreeBSD-src-6216087b31d157089087e7d8cbe21835e4c700a9.zip FreeBSD-src-6216087b31d157089087e7d8cbe21835e4c700a9.tar.gz | |
Introduce a kernel config for the Mandatory Access Control framework.
This kernel config briefly describes some of the major MAC policies
available on FreeBSD. The hope is that this will raise the awareness
about MAC and get more people interested.
Discussed with: scottl
Diffstat (limited to 'sys/powerpc')
| -rw-r--r-- | sys/powerpc/conf/MAC | 28 |
1 files changed, 28 insertions, 0 deletions
diff --git a/sys/powerpc/conf/MAC b/sys/powerpc/conf/MAC new file mode 100644 index 0000000..8626383 --- /dev/null +++ b/sys/powerpc/conf/MAC @@ -0,0 +1,28 @@ +# MAC -- Generic kernel configuration file for FreeBSD/powerpc MAC +# +# The Mandatory Access Control, or MAC, framework allows administrators to +# finely control system security by providing for a loadable security pol- +# icy architecture. +# +# For more information see: +# +# http://www.FreeBSD.org/doc/en_US.ISO8859-1/books/handbook/mac.html +# +# $FreeBSD$ + +include GENERIC +ident MAC + +options MAC + +#options MAC_BIBA # BIBA data integrity policy +#options MAC_BSDEXTENDED # File system firewall policy +#options MAC_IFOFF # Network interface silencing policy +#options MAC_LOMAC # Low-watermark data integrity policy +#options MAC_MLS # Multi-level confidentiality policy +#options MAC_NONE # NULL policy +#options MAC_PARTITION # Process partition policy +#options MAC_PORTACL # Network port access control policy +#options MAC_SEEOTHERUIDS # UID visibility policy +#options MAC_STUB # Stub policy +#options MAC_TEST # Testing policy for the MAC framework |
