| mac.3 (0213c21b4470357da5f8e6bf29c838191d56923f) | mac.3 (ecf889825d625cf5429961f7ba32ae17ef5dae6d) |
|---|---|
| 1.\" Copyright (c) 2001 Networks Associates Technology, Inc. | 1.\" Copyright (c) 2001, 2003 Networks Associates Technology, Inc. |
| 2.\" All rights reserved. 3.\" 4.\" This software was developed for the FreeBSD Project by Chris 5.\" Costello at Safeport Network Services and Network Associates 6.\" Laboratories, the Security Research Division of Network Associates, 7.\" Inc. under DARPA/SPAWAR contract N66001-01-C-8035 ("CBOSS"), as part 8.\" of the DARPA CHATS research program. 9.\" --- 20 unchanged lines hidden (view full) --- 30.\" 31.\" $FreeBSD$ 32.\" 33.Dd December 21, 2001 34.Dt MAC 3 35.Os 36.Sh NAME 37.Nm mac | 2.\" All rights reserved. 3.\" 4.\" This software was developed for the FreeBSD Project by Chris 5.\" Costello at Safeport Network Services and Network Associates 6.\" Laboratories, the Security Research Division of Network Associates, 7.\" Inc. under DARPA/SPAWAR contract N66001-01-C-8035 ("CBOSS"), as part 8.\" of the DARPA CHATS research program. 9.\" --- 20 unchanged lines hidden (view full) --- 30.\" 31.\" $FreeBSD$ 32.\" 33.Dd December 21, 2001 34.Dt MAC 3 35.Os 36.Sh NAME 37.Nm mac |
| 38.Nd introduction to the POSIX.1e MAC security API | 38.Nd Introduction to the MAC security API |
| 39.Sh LIBRARY 40.Lb libc 41.Sh SYNOPSIS 42.In sys/mac.h 43.Pp 44In the kernel configuration file: 45.Cd "options MAC" 46.Sh DESCRIPTION --- 81 unchanged lines hidden (view full) --- 128.Xr mac_free 3 , 129.Xr mac_get 3 , 130.Xr mac_prepare 3 , 131.Xr mac_set 3 , 132.Xr mac_text 3 , 133.Xr mac 4 , 134.Xr mac 9 135.Sh STANDARDS | 39.Sh LIBRARY 40.Lb libc 41.Sh SYNOPSIS 42.In sys/mac.h 43.Pp 44In the kernel configuration file: 45.Cd "options MAC" 46.Sh DESCRIPTION --- 81 unchanged lines hidden (view full) --- 128.Xr mac_free 3 , 129.Xr mac_get 3 , 130.Xr mac_prepare 3 , 131.Xr mac_set 3 , 132.Xr mac_text 3 , 133.Xr mac 4 , 134.Xr mac 9 135.Sh STANDARDS |
| 136These APIs are loosely based on the APIs described in POSIX.1e. |
|
| 136POSIX.1e is described in IEEE POSIX.1e draft 17. 137Discussion of the draft 138continues on the cross-platform POSIX.1e implementation mailing list. 139To join this list, see the 140.Fx 141POSIX.1e implementation page 142for more information. | 137POSIX.1e is described in IEEE POSIX.1e draft 17. 138Discussion of the draft 139continues on the cross-platform POSIX.1e implementation mailing list. 140To join this list, see the 141.Fx 142POSIX.1e implementation page 143for more information. |
| 144However, the resemblence of these APIs to the POSIX APIs is only loose, 145as the POSIX APIs were unable to express many notions required for 146flexible and extensible access control. |
|
| 143.Sh HISTORY 144Support for Mandatory Access Control was introduced in 145.Fx 5.0 146as part of the 147.Tn TrustedBSD 148Project. 149.Sh BUGS 150The 151.Tn TrustedBSD 152MAC Framework and associated policies, interfaces, and 153applications are considered to be an experimental feature in 154.Fx . 155Sites considering production deployment should keep the experimental 156status of these services in mind during any deployment process. 157See also 158.Xr mac 9 159for related considerations regarding the kernel framework. | 147.Sh HISTORY 148Support for Mandatory Access Control was introduced in 149.Fx 5.0 150as part of the 151.Tn TrustedBSD 152Project. 153.Sh BUGS 154The 155.Tn TrustedBSD 156MAC Framework and associated policies, interfaces, and 157applications are considered to be an experimental feature in 158.Fx . 159Sites considering production deployment should keep the experimental 160status of these services in mind during any deployment process. 161See also 162.Xr mac 9 163for related considerations regarding the kernel framework. |