*nix Documentation Project
·  Home
 +   man pages
·  Linux HOWTOs
·  FreeBSD Tips
·  *niX Forums

  man pages->FreeBSD man pages -> mac_stub (4)              



NAME    [Toc]    [Back]

     mac_stub -- MAC policy stub module

SYNOPSIS    [Toc]    [Back]

     To compile the sample policy into your kernel, place the following lines
     in your kernel configuration file:

	   options MAC
	   options MAC_STUB

     Alternately, to load the sample module at boot time, place the following
     line in your kernel configuration file:

	   options MAC

     and in loader.conf(5):


DESCRIPTION    [Toc]    [Back]

     The mac_stub policy module implements a sample MAC policy that has no
     effect on access control in the system.  Unlinke 4(mac_none), each MAC
     entry point is defined as a ``no-op'', so the policy module will be
     entered for each event, but no change in system behavior should result.

   Label Format    [Toc]    [Back]
     No labels are defined for mac_stub.

SEE ALSO    [Toc]    [Back]

     mac(4), mac_biba(4), mac_bsdextended(4), mac_ifoff(4), mac_lomac(4),
     mac_mls(4), mac_none(4), mac_partition(4), mac_portacl(4),
     mac_seeotheruids(4), mac_test(4), mac(9)

HISTORY    [Toc]    [Back]

     The mac_stub policy module first appeared in FreeBSD 5.1 and was developed
 by the TrustedBSD Project.

AUTHORS    [Toc]    [Back]

     This software was contributed to the FreeBSD Project by Network Associates
 Labs, the Security Research Division of Network Associates Inc.
     under DARPA/SPAWAR contract N66001-01-C-8035 (``CBOSS''), as part of the
     DARPA CHATS research program.

BUGS    [Toc]    [Back]

     See mac(9) concerning appropriateness for production use.	The TrustedBSD
     MAC Framework is considered experimental in FreeBSD.

     While the MAC Framework design is intended to support the containment of
     the root user, not all attack channels are currently protected by entry
     point checks.  As such, MAC Framework policies should not be relied on,
     in isolation, to protect against a malicious privileged user.

FreeBSD 5.2.1		       December 1, 2002 		 FreeBSD 5.2.1
[ Back ]
 Similar pages
Name OS Title
mac_none FreeBSD null MAC policy module
pm IRIX Policy Module operations
pam_updbe HP-UX User policy definition service module
dcons_crom FreeBSD Configuration ROM stub for dcons(4)
ki2c OpenBSD kauai i2c interface stub
ldr_inq_region Tru64 Return module information about a region in a loaded module
mac_ifoff FreeBSD interface silencing policy
mac_test FreeBSD MAC framework testing policy
dominance IRIX MAC label comparison policy
mac_partition FreeBSD process partition policy
Copyright © 2004-2005 DeniX Solutions SRL
newsletter delivery service