| mac_none.4 (b652778e426d00b6a1df29bbd86869db86f36e25) | mac_none.4 (208a8b953215180de3134785b3950d3709047624) |
|---|---|
| 1.\" Copyright (c) 2002, 2003 Networks Associates Technology, Inc. 2.\" All rights reserved. 3.\" 4.\" This software was developed for the FreeBSD Project by Chris Costello 5.\" at Safeport Network Services and Network Associates Laboratories, the 6.\" Security Research Division of Network Associates, Inc. under 7.\" DARPA/SPAWAR contract N66001-01-C-8035 ("CBOSS"), as part of the 8.\" DARPA CHATS research program. --- 16 unchanged lines hidden (view full) --- 25.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 26.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 27.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 28.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 29.\" SUCH DAMAGE. 30.\" 31.\" $FreeBSD$ 32.\" | 1.\" Copyright (c) 2002, 2003 Networks Associates Technology, Inc. 2.\" All rights reserved. 3.\" 4.\" This software was developed for the FreeBSD Project by Chris Costello 5.\" at Safeport Network Services and Network Associates Laboratories, the 6.\" Security Research Division of Network Associates, Inc. under 7.\" DARPA/SPAWAR contract N66001-01-C-8035 ("CBOSS"), as part of the 8.\" DARPA CHATS research program. --- 16 unchanged lines hidden (view full) --- 25.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 26.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 27.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 28.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 29.\" SUCH DAMAGE. 30.\" 31.\" $FreeBSD$ 32.\" |
| 33.Dd December 1, 2002 | 33.Dd July 25, 2015 |
| 34.Dt MAC_NONE 4 35.Os 36.Sh NAME 37.Nm mac_none 38.Nd "null MAC policy module" 39.Sh SYNOPSIS 40To compile the null policy 41into your kernel, place the following lines in your kernel --- 51 unchanged lines hidden (view full) --- 93.Fx 94Project by Network Associates Labs, 95the Security Research Division of Network Associates 96Inc. 97under DARPA/SPAWAR contract N66001-01-C-8035 98.Pq Dq CBOSS , 99as part of the DARPA CHATS research program. 100.Sh BUGS | 34.Dt MAC_NONE 4 35.Os 36.Sh NAME 37.Nm mac_none 38.Nd "null MAC policy module" 39.Sh SYNOPSIS 40To compile the null policy 41into your kernel, place the following lines in your kernel --- 51 unchanged lines hidden (view full) --- 93.Fx 94Project by Network Associates Labs, 95the Security Research Division of Network Associates 96Inc. 97under DARPA/SPAWAR contract N66001-01-C-8035 98.Pq Dq CBOSS , 99as part of the DARPA CHATS research program. 100.Sh BUGS |
| 101See 102.Xr mac 9 103concerning appropriateness for production use. 104The 105.Tn TrustedBSD 106MAC Framework is considered experimental in 107.Fx . 108.Pp | |
| 109While the MAC Framework design is intended to support the containment of 110the root user, not all attack channels are currently protected by entry 111point checks. 112As such, MAC Framework policies should not be relied on, in isolation, 113to protect against a malicious privileged user. | 101While the MAC Framework design is intended to support the containment of 102the root user, not all attack channels are currently protected by entry 103point checks. 104As such, MAC Framework policies should not be relied on, in isolation, 105to protect against a malicious privileged user. |