search for: getpmac

..."apachectl", and "/usr/local/ etc/rc.d/nagios.sh" with the label biba/10, but they should be launched with the label biba/10(10-10). I've defined the "default" login class with a label of "biba/high". I login at the machine as root, and... ----- # getpmac biba/high(low-high) # setpmac biba/low getpmac biba/low(low-high) # setpmac biba/low setpmac biba/high getpmac biba/high(low-high) So, if I launch a process with a "setpmac biba/low", it actually inherits a label of "biba/low(high-low)", being able to recover its biba/high...

...ed a script at boot time to update the labels anyway - the /dev filesystem needs them too. When running a script to set the labels from /etc/rc.d I ran into the following problem. Here's the relevant part of the script: check_startmsgs && echo -n "Setting MAC policy: " getpmac id ls -lZ /sbin/dhclient /usr/sbin/setpmac lomac/equal,mls/equal \ /usr/sbin/setfsmac -v -ef /usr/home/test/mac.policy / ls -lZ /sbin/dhclient setfmac lomac/high\[low\] /sbin/dhclient ls -lZ /sbin/dhclient check_startmsgs && echo '.' It produces the following outpu...