1.\" Copyright (c) 2002 Networks Associates Technology, Inc. 2.\" All rights reserved. 3.\" 4.\" This software was developed for the FreeBSD Project by Chris 5.\" Costello at Safeport Network Services and NAI Labs, the Security 6.\" Research Division of Network Associates, Inc. under DARPA/SPAWAR 7.\" contract N66001-01-C-8035 ("CBOSS"), as part of the DARPA CHATS 8.\" research program. 9.\" 10.\" Redistribution and use in source and binary forms, with or without 11.\" modification, are permitted provided that the following conditions 12.\" are met: 13.\" 1. Redistributions of source code must retain the above copyright 14.\" notice, this list of conditions and the following disclaimer. 15.\" 2. Redistributions in binary form must reproduce the above copyright 16.\" notice, this list of conditions and the following disclaimer in the 17.\" documentation and/or other materials provided with the distribution. 18.\" 19.\" THIS SOFTWARE IS PROVIDED BY THE AUTHORS AND CONTRIBUTORS ``AS IS'' AND 20.\" ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 21.\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 22.\" ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHORS OR CONTRIBUTORS BE LIABLE 23.\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 24.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 25.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 26.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 27.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 28.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 29.\" SUCH DAMAGE. 30.\" 31.\" $FreeBSD$ 32.Dd June 27, 2002 33.Dt SETFMAC 8 34.Os 35.Sh NAME 36.Nm setfmac , 37.Nm setfsmac 38.Nd set MAC label for a file system object 39.Sh SYNOPSIS 40.Nm setfmac 41.Op Fl hR 42.Ar label 43.Ar 44.Nm setfsmac 45.Op Fl ehvx 46.Op Fl f Ar specfile 47.Op Fl s Ar specfile 48.Ar 49.Sh DESCRIPTION 50The 51.Nm setfmac 52utility assigns the specified MAC label to the specified files. 53The following options are available: 54.Bl -tag -width indent 55.It Fl R 56Set the labels on the file hierarchies rooted in the files instead of 57just the files themselves. 58.It Fl h 59If the file is a symbolic link, change the label of the link rather 60than the file that the link points to. 61.El 62.Pp 63The 64.Nm setfsmac 65utility accepts a list of specification files as input and sets the MAC 66labels on the specified file system hierarchies. 67Path names specified will be visited in order as given on the command line, 68and each tree will be traversed in pre-order. 69(Generally, it will not be very useful to use relative, instead of absolute, 70paths.) 71The labels that match a file will be combined and set in a single 72transaction. 73.Pp 74The following options are available: 75.Bl -tag -width indent 76.It Fl e 77Treat any file systems encountered which do not support MAC labelling as 78errors, instead of warning and skipping past them. 79.It Fl f Ar specfile 80Add the specifications in 81.Ar specfile 82as a set of which at most one will be applied to each file traversed per 83.Fl f Ar specfile 84given. 85.It Fl h 86If the file is a symbolic link, change the label of the link rather 87than the file that the link points to. 88.It Fl s Ar specfile 89Add the specification in 90.Ar specfile , 91but assume that the specification format is that used in the port 92of 93.Tn SELinux 94to 95.Fx , 96.Tn SEBSD . 97At most one of the specifications will be applied to each file traversed per 98.Fl f Ar specfile 99given. 100The prefix 101.Dq Li sebsd/ 102will automatically be prepended to the labels in this file, and labels 103matching 104.Dq Li <<none>> 105will be explicitly not relabeled. 106This permits SEBSD to re-use existing 107.Tn SELinux 108policy specification files 109unmodified. 110.It Fl v 111Increase the degree of verbosity. 112When given, information detailing the labelling operation is printed while 113in progress. 114.It Fl x 115Do not cross recurse into new file systems when traversing them. 116.El 117.Sh SEE ALSO 118.Xr mac 3 , 119.Xr mac_set_file 3 , 120.Xr mac_set_link 3 , 121.Xr mac 4 , 122.Xr re_format 7 , 123.Xr getfmac 8 , 124.Xr mac 9 125