mirror of
https://git.hardenedbsd.org/hardenedbsd/HardenedBSD.git
synced 2025-01-11 17:04:19 +01:00
Correct the definition of the multilabel flag: it enables multilabel
MAC support on the file system, if supported, which causes MAC to treat each object as having its own label, rather than using a single label for all objects on the file system. This doesn't have to be used in combination with the tunefs/newfs flags -- it's an alternative.
This commit is contained in:
parent
f72f4d3a9c
commit
90b9e3f199
Notes:
svn2git
2020-12-20 02:59:44 +00:00
svn path=/head/; revision=127435
@ -147,14 +147,19 @@ flag, this is the same as specifying all the options listed in the
|
||||
.Xr fstab 5
|
||||
file for the file system.
|
||||
.It Cm multilabel
|
||||
Enable Mandatory Access Control, or MAC.
|
||||
Must be used in conjunction with the
|
||||
Enable multi-label Mandatory Access Control, or MAC, on the specified file
|
||||
system.
|
||||
If the file system supports multilabel operation, individual labels will
|
||||
be maintained for each object in the file system, rather than using a
|
||||
single label for all obejcts.
|
||||
An alternative to
|
||||
.Em -l
|
||||
flag in
|
||||
.Xr tunefs 8 .
|
||||
See
|
||||
.Xr mac 4
|
||||
for more information.
|
||||
for more information, which cause the multilabel mount flag to be set
|
||||
automatically at mount-time.
|
||||
.It Cm noasync
|
||||
Metadata I/O should be done synchronously, while data I/O should be done
|
||||
asynchronously.
|
||||
|
Loading…
Reference in New Issue
Block a user