HardenedBSD/share
Baptiste Daroussin 8aac90f18a mac_do: add a new MAC/do policy and mdo(1) utility
This policy enables a user to become another user without having to be
root (hence no setuid binary). it is configured via rules using sysctl
security.mac.do.rules

For example:
security.mac.do.rules=uid=1001:80,gid=0:any

The above rule means the user identifier by the uid 1001 is able to
become user 80
Any user of the group 0 are allowed to become any user on the system.

The mdo(1) utility expects the MAC/do policy to be installed and its
rules defined.

Reviewed by:	des
Differential Revision:	https://reviews.freebsd.org/D45145
2024-05-22 14:01:41 +02:00
..
colldef
colldef_unicode
ctypedef
dict
doc
dtrace
examples
i18n
keys
man
misc
mk
monetdef
monetdef_unicode
msgdef
msgdef_unicode
numericdef
numericdef_unicode
security
sendmail
skel
snmp
syscons
tabset
termcap
tests
timedef
vt
zoneinfo
Makefile
Makefile.inc