1b8be9d15SRobert Watson.\" Copyright (c) 2002, 2003 Networks Associates Technology, Inc. 217c5113aSChris Costello.\" All rights reserved. 317c5113aSChris Costello.\" 45792da74SChris Costello.\" This software was developed for the FreeBSD Project by Chris Costello 55792da74SChris Costello.\" at Safeport Network Services and Network Associates Laboratories, the 65792da74SChris Costello.\" Security Research Division of Network Associates, Inc. under 717c5113aSChris Costello.\" DARPA/SPAWAR contract N66001-01-C-8035 ("CBOSS"), as part of the 817c5113aSChris Costello.\" DARPA CHATS research program. 917c5113aSChris Costello.\" 1017c5113aSChris Costello.\" Redistribution and use in source and binary forms, with or without 1117c5113aSChris Costello.\" modification, are permitted provided that the following conditions 1217c5113aSChris Costello.\" are met: 1317c5113aSChris Costello.\" 1. Redistributions of source code must retain the above copyright 1417c5113aSChris Costello.\" notice, this list of conditions and the following disclaimer. 1517c5113aSChris Costello.\" 2. Redistributions in binary form must reproduce the above copyright 1617c5113aSChris Costello.\" notice, this list of conditions and the following disclaimer in the 1717c5113aSChris Costello.\" documentation and/or other materials provided with the distribution. 1817c5113aSChris Costello.\" 1917c5113aSChris Costello.\" THIS SOFTWARE IS PROVIDED BY THE AUTHORS AND CONTRIBUTORS ``AS IS'' AND 2017c5113aSChris Costello.\" ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 2117c5113aSChris Costello.\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 2217c5113aSChris Costello.\" ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHORS OR CONTRIBUTORS BE LIABLE 2317c5113aSChris Costello.\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 2417c5113aSChris Costello.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 2517c5113aSChris Costello.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 2617c5113aSChris Costello.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 2717c5113aSChris Costello.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 2817c5113aSChris Costello.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 2917c5113aSChris Costello.\" SUCH DAMAGE. 3017c5113aSChris Costello.\" 31208a8b95SEdward Tomasz Napierala.Dd July 25, 2015 3217c5113aSChris Costello.Dt MAC_NONE 4 33aa12cea2SUlrich Spörlein.Os 3417c5113aSChris Costello.Sh NAME 3517c5113aSChris Costello.Nm mac_none 36b8be9d15SRobert Watson.Nd "null MAC policy module" 3717c5113aSChris Costello.Sh SYNOPSIS 38b8be9d15SRobert WatsonTo compile the null policy 3917c5113aSChris Costellointo your kernel, place the following lines in your kernel 4017c5113aSChris Costelloconfiguration file: 413cc3bf52SRuslan Ermilov.Bd -ragged -offset indent 4217c5113aSChris Costello.Cd "options MAC" 4317c5113aSChris Costello.Cd "options MAC_NONE" 443cc3bf52SRuslan Ermilov.Ed 4517c5113aSChris Costello.Pp 4650d922a0SGlen BarberAlternately, to load the none module at boot time, place the following line 4717c5113aSChris Costelloin your kernel configuration file: 483cc3bf52SRuslan Ermilov.Bd -ragged -offset indent 4917c5113aSChris Costello.Cd "options MAC" 503cc3bf52SRuslan Ermilov.Ed 5117c5113aSChris Costello.Pp 5217c5113aSChris Costelloand in 5317c5113aSChris Costello.Xr loader.conf 5 : 543cc3bf52SRuslan Ermilov.Bd -literal -offset indent 553cc3bf52SRuslan Ermilovmac_none_load="YES" 563cc3bf52SRuslan Ermilov.Ed 5717c5113aSChris Costello.Sh DESCRIPTION 5817c5113aSChris CostelloThe 5917c5113aSChris Costello.Nm 6050d922a0SGlen Barberpolicy module implements a none MAC policy that has no effect on 6117c5113aSChris Costelloaccess control in the system. 6236df40b4STom RhodesUnlike 6349aa339eSRuslan Ermilov.Xr mac_stub 4 , 64b8be9d15SRobert Watsonnone of the MAC entry points are defined. 6517c5113aSChris Costello.Ss Label Format 6617c5113aSChris CostelloNo labels are defined for 6717c5113aSChris Costello.Nm . 6817c5113aSChris Costello.Sh SEE ALSO 69ccf09d7cSChris Costello.Xr mac 4 , 7017c5113aSChris Costello.Xr mac_biba 4 , 7117c5113aSChris Costello.Xr mac_bsdextended 4 , 72*287d467cSMitchell Horne.Xr mac_ddb 4 , 73057baf37SChris Costello.Xr mac_ifoff 4 , 749cad8863SChris Costello.Xr mac_lomac 4 , 7517c5113aSChris Costello.Xr mac_mls 4 , 76057baf37SChris Costello.Xr mac_partition 4 , 770c6e926fSChris Costello.Xr mac_portacl 4 , 7817c5113aSChris Costello.Xr mac_seeotheruids 4 , 79b8be9d15SRobert Watson.Xr mac_stub 4 , 8017c5113aSChris Costello.Xr mac_test 4 , 8117c5113aSChris Costello.Xr mac 9 8217c5113aSChris Costello.Sh HISTORY 8317c5113aSChris CostelloThe 8417c5113aSChris Costello.Nm 8517c5113aSChris Costellopolicy module first appeared in 8617c5113aSChris Costello.Fx 5.0 873cc3bf52SRuslan Ermilovand was developed by the 883cc3bf52SRuslan Ermilov.Tn TrustedBSD 893cc3bf52SRuslan ErmilovProject. 9017c5113aSChris Costello.Sh AUTHORS 9117c5113aSChris CostelloThis software was contributed to the 9217c5113aSChris Costello.Fx 9317c5113aSChris CostelloProject by Network Associates Labs, 9417c5113aSChris Costellothe Security Research Division of Network Associates 955203edcdSRuslan ErmilovInc. 965203edcdSRuslan Ermilovunder DARPA/SPAWAR contract N66001-01-C-8035 973cc3bf52SRuslan Ermilov.Pq Dq CBOSS , 9817c5113aSChris Costelloas part of the DARPA CHATS research program. 9917c5113aSChris Costello.Sh BUGS 10017c5113aSChris CostelloWhile the MAC Framework design is intended to support the containment of 10117c5113aSChris Costellothe root user, not all attack channels are currently protected by entry 10217c5113aSChris Costellopoint checks. 10317c5113aSChris CostelloAs such, MAC Framework policies should not be relied on, in isolation, 10417c5113aSChris Costelloto protect against a malicious privileged user. 105