search for: setpmac

...e enforced only for reading, but not writing. 1) Biba I've created test file with biba/127 label: $ echo "Message" > file_biba_127.txt $ setfmac biba/127 file_biba_127.txt $ getfmac file_biba_127.txt file_biba_127.txt: biba/127,mls/low Trying to read with different labels: $ setpmac biba/high more file_biba_127.txt file_biba_127.txt: Permission denied $ setpmac biba/128 more file_biba_127.txt file_biba_127.txt: Permission denied $ setpmac biba/127 more file_biba_127.txt Message $ setpmac biba/126 more file_biba_127.txt Message $ setpmac biba/low more file_biba_127.txt...

...uot;/usr/local/ etc/rc.d/nagios.sh" with the label biba/10, but they should be launched with the label biba/10(10-10). I've defined the "default" login class with a label of "biba/high". I login at the machine as root, and... ----- # getpmac biba/high(low-high) # setpmac biba/low getpmac biba/low(low-high) # setpmac biba/low setpmac biba/high getpmac biba/high(low-high) So, if I launch a process with a "setpmac biba/low", it actually inherits a label of "biba/low(high-low)", being able to recover its biba/high setting, something that would...

FreeBSD version: 5.1-RELEASE Hi, I'm quite new to FreeBSD. I've check list archives and read a handbook, but I didn't find solution to my problem and I hope this is not off-topic. I've installed 5.1-RELEASE, enabled ACLs on the filesystems and I wanted to test MAC features. I'm also new to MAC, so perhaps this is some my mistake. When I enable mac_biba or mac_lomac (in

...yway - the /dev filesystem needs them too. When running a script to set the labels from /etc/rc.d I ran into the following problem. Here's the relevant part of the script: check_startmsgs && echo -n "Setting MAC policy: " getpmac id ls -lZ /sbin/dhclient /usr/sbin/setpmac lomac/equal,mls/equal \ /usr/sbin/setfsmac -v -ef /usr/home/test/mac.policy / ls -lZ /sbin/dhclient setfmac lomac/high\[low\] /sbin/dhclient ls -lZ /sbin/dhclient check_startmsgs && echo '.' It produces the following output on boot: Setting MAC policy: lomac/high(low-hi...