HardenedBSD/sbin/veriexec/Makefile.depend

# Autogenerated - do NOT edit!

DIRDEPS = \
	include \
	include/xlocale \
	lib/${CSU_DIR} \
	lib/libbearssl \
	lib/libc \
	lib/libcompiler_rt \
	lib/libsecureboot \
	lib/libveriexec \
	usr.bin/yacc.host \


.include <dirdeps.mk>

.if ${DEP_RELDIR} == ${_DEP_RELDIR}
# local dependencies - needed for -jN in clean tree
.endif
Add verifying manifest loader for mac_veriexec This tool will verify a signed manifest and load contents into mac_veriexec for storage Sponsored by: Juniper Networks Differential Revision: D16575 2019-02-26 07:17:23 +01:00			`# Autogenerated - do NOT edit!`

			`DIRDEPS = \`
			`include \`
			`include/xlocale \`
			`lib/${CSU_DIR} \`
			`lib/libbearssl \`
			`lib/libc \`
			`lib/libcompiler_rt \`
			`lib/libsecureboot \`
			`lib/libveriexec \`
Add mac_grantbylabel This module allows controlled privilege escallation via mac labels securely associated with a process via mac_veriexec. There are over 700 PRIV_* but we can compress many of them into a single GBL_* thus constraining the size of gbl labels. The goal is to allow a daemon to run as an unprivileged process while still being able a set of privileged operations needed. We add APIs to libveriexec so that userland processes can check labels and an exec_script API that allows a suitably labeled process to run something like a python interpreter directly if necessary; overcomming the 'indirect' flag applied to the interpreter. Add -l option to sbin/veriexec to report labels. Reviewed by: stevek Sponsored by: Juniper Networks, Inc. Differential Revision: https://reviews.freebsd.org/D41431 2023-08-25 02:41:22 +02:00			`usr.bin/yacc.host \`
Add verifying manifest loader for mac_veriexec This tool will verify a signed manifest and load contents into mac_veriexec for storage Sponsored by: Juniper Networks Differential Revision: D16575 2019-02-26 07:17:23 +01:00

			`.include <dirdeps.mk>`

			`.if ${DEP_RELDIR} == ${_DEP_RELDIR}`
			`# local dependencies - needed for -jN in clean tree`
			`.endif`