1# $FreeBSD$ 2# 3# This is a sample LOMAC policy based upon the PLM defined in the 4# original FreeBSD LOMAC port. It may be configured on a 5# system via setfsmac(8). 6 7.* lomac/high 8/sbin/dhclient lomac/high[low] 9/dev(/.*)? lomac/equal 10# This is not an exhaustive list of all "privileged" devices. 11/dev/mdctl lomac/high 12/dev/pci lomac/high 13/dev/k?mem lomac/high 14/dev/io lomac/high 15/dev/agp.* lomac/high 16(/var)?/tmp(/.*)? lomac/equal 17/tmp/\.X11-unix lomac/high[equal] 18/tmp/\.X11-unix/.* lomac/equal 19/proc(/.*)? lomac/equal 20/mnt.* lomac/low 21(/usr)?/home lomac/high[low] 22(/usr)?/home/.* lomac/low 23/var/mail(/.*)? lomac/low 24/var/spool/mqueue(/.*)? lomac/low 25(/mnt)?/cdrom(/.*)? lomac/high 26(/usr)?/home/(ftp|samba)(/.*)? lomac/high 27/var/log/sendmail\.st lomac/low 28/var/run/utx.active lomac/equal 29/var/log/utx.(lastlogin|log) lomac/equal 30