| setfmac.8 (f42021e7d17401dd6a08a731400acf4dfe71f67c) | setfmac.8 (6cc0c63755d76238e2ff6e6b22dbe4cfe9102801) |
|---|---|
| 1.\" Copyright (c) 2002 Networks Associates Technology, Inc. 2.\" All rights reserved. 3.\" 4.\" This software was developed for the FreeBSD Project by Chris 5.\" Costello at Safeport Network Services and NAI Labs, the Security 6.\" Research Division of Network Associates, Inc. under DARPA/SPAWAR 7.\" contract N66001-01-C-8035 ("CBOSS"), as part of the DARPA CHATS 8.\" research program. --- 15 unchanged lines hidden (view full) --- 24.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 25.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 26.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 27.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 28.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 29.\" SUCH DAMAGE. 30.\" 31.\" $FreeBSD$ | 1.\" Copyright (c) 2002 Networks Associates Technology, Inc. 2.\" All rights reserved. 3.\" 4.\" This software was developed for the FreeBSD Project by Chris 5.\" Costello at Safeport Network Services and NAI Labs, the Security 6.\" Research Division of Network Associates, Inc. under DARPA/SPAWAR 7.\" contract N66001-01-C-8035 ("CBOSS"), as part of the DARPA CHATS 8.\" research program. --- 15 unchanged lines hidden (view full) --- 24.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 25.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 26.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 27.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 28.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 29.\" SUCH DAMAGE. 30.\" 31.\" $FreeBSD$ |
| 32.Dd June 27, 2002 | 32.Dd March 13, 2003 |
| 33.Dt SETFMAC 8 34.Os 35.Sh NAME | 33.Dt SETFMAC 8 34.Os 35.Sh NAME |
| 36.Nm setfmac , 37.Nm setfsmac | 36.Nm setfmac |
| 38.Nd set MAC label for a file system object 39.Sh SYNOPSIS 40.Nm setfmac 41.Op Fl hR 42.Ar label 43.Ar | 37.Nd set MAC label for a file system object 38.Sh SYNOPSIS 39.Nm setfmac 40.Op Fl hR 41.Ar label 42.Ar |
| 44.Nm setfsmac 45.Op Fl ehvx 46.Op Fl f Ar specfile 47.Op Fl s Ar specfile 48.Ar | |
| 49.Sh DESCRIPTION 50The 51.Nm setfmac 52utility assigns the specified MAC label to the specified files. 53The following options are available: 54.Bl -tag -width indent 55.It Fl R 56Set the labels on the file hierarchies rooted in the files instead of 57just the files themselves. 58.It Fl h 59If the file is a symbolic link, change the label of the link rather 60than the file that the link points to. 61.El | 43.Sh DESCRIPTION 44The 45.Nm setfmac 46utility assigns the specified MAC label to the specified files. 47The following options are available: 48.Bl -tag -width indent 49.It Fl R 50Set the labels on the file hierarchies rooted in the files instead of 51just the files themselves. 52.It Fl h 53If the file is a symbolic link, change the label of the link rather 54than the file that the link points to. 55.El |
| 62.Pp 63The 64.Nm setfsmac 65utility accepts a list of specification files as input and sets the MAC 66labels on the specified file system hierarchies. 67Path names specified will be visited in order as given on the command line, 68and each tree will be traversed in pre-order. 69(Generally, it will not be very useful to use relative, instead of absolute, 70paths.) 71The labels that match a file will be combined and set in a single 72transaction. 73.Pp 74The following options are available: 75.Bl -tag -width indent 76.It Fl e 77Treat any file systems encountered which do not support MAC labelling as 78errors, instead of warning and skipping past them. 79.It Fl f Ar specfile 80Add the specifications in 81.Ar specfile 82as a set of which at most one will be applied to each file traversed per 83.Fl f Ar specfile 84given. 85.It Fl h 86If the file is a symbolic link, change the label of the link rather 87than the file that the link points to. 88.It Fl s Ar specfile 89Add the specification in 90.Ar specfile , 91but assume that the specification format is that used in the port 92of 93.Tn SELinux 94to 95.Fx , 96.Tn SEBSD . 97At most one of the specifications will be applied to each file traversed per 98.Fl f Ar specfile 99given. 100The prefix 101.Dq Li sebsd/ 102will automatically be prepended to the labels in this file, and labels 103matching 104.Dq Li <<none>> 105will be explicitly not relabeled. 106This permits SEBSD to re-use existing 107.Tn SELinux 108policy specification files 109unmodified. 110.It Fl v 111Increase the degree of verbosity. 112When given, information detailing the labelling operation is printed while 113in progress. 114.It Fl x 115Do not cross recurse into new file systems when traversing them. 116.El | |
| 117.Sh SEE ALSO 118.Xr mac 3 , 119.Xr mac_set_file 3 , 120.Xr mac_set_link 3 , 121.Xr mac 4 , 122.Xr re_format 7 , 123.Xr getfmac 8 , | 56.Sh SEE ALSO 57.Xr mac 3 , 58.Xr mac_set_file 3 , 59.Xr mac_set_link 3 , 60.Xr mac 4 , 61.Xr re_format 7 , 62.Xr getfmac 8 , |
| 63.Xr setfsmac 8 , |
|
| 124.Xr mac 9 | 64.Xr mac 9 |