HardenedBSD/etc/mac.conf

#
# $FreeBSD$
#
# TrustedBSD MAC userland policy configuration file.  Kernel modules
# export label information, and mac.conf indicates to userland
# applications what defaults they should use in the absense of any
# other user-provided information.
#

#
# Default label set to be used by simple MAC applications
#

default_labels file ?biba,?lomac,?mls,?sebsd
default_labels ifnet ?biba,?lomac,?mls,?sebsd
default_labels process ?biba,?lomac,?mls,?partition,?sebsd
default_labels socket ?biba,?lomac,?mls
Hook up a sample mac.conf to the install. The sample basically tells applications to print labels for all of the TrustedBSD- generated policies, if they are present. Obtained from: TrustedBSD Project Sponsored by: DARPA, Network Associates Laboratories 2002-10-22 16:38:49 +02:00			`#`
			`# $FreeBSD$`
			`#`
			`# TrustedBSD MAC userland policy configuration file. Kernel modules`
			`# export label information, and mac.conf indicates to userland`
			`# applications what defaults they should use in the absense of any`
			`# other user-provided information.`
			`#`

			`#`
			`# Default label set to be used by simple MAC applications`
			`#`

Use the new "default_labels" syntax in the default mac.conf file. Obtained from: TrustedBSD Project Sponsored by: DARPA, Network Associates Laboratories 2003-11-11 04:30:29 +01:00			`default_labels file ?biba,?lomac,?mls,?sebsd`
			`default_labels ifnet ?biba,?lomac,?mls,?sebsd`
			`default_labels process ?biba,?lomac,?mls,?partition,?sebsd`
Add "socket" type to the list of default object types, and by default attempt to list Biba, LOMAC, and MLS label information for the socket if they are present. Obtained from: TrustedBSD Project Sponsored by: DARPA, Network Associates Laboratories 2003-11-15 03:08:01 +01:00			`default_labels socket ?biba,?lomac,?mls`
Hook up a sample mac.conf to the install. The sample basically tells applications to print labels for all of the TrustedBSD- generated policies, if they are present. Obtained from: TrustedBSD Project Sponsored by: DARPA, Network Associates Laboratories 2002-10-22 16:38:49 +02:00