From owner-p4-projects@FreeBSD.ORG Mon Aug 25 22:51:50 2008 Return-Path: Delivered-To: p4-projects@freebsd.org Received: by hub.freebsd.org (Postfix, from userid 32767) id 88779106567F; Mon, 25 Aug 2008 22:51:50 +0000 (UTC) Delivered-To: perforce@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 4B000106566B for ; Mon, 25 Aug 2008 22:51:50 +0000 (UTC) (envelope-from bb+lists.freebsd.perforce@cyrus.watson.org) Received: from repoman.freebsd.org (repoman.freebsd.org [IPv6:2001:4f8:fff6::29]) by mx1.freebsd.org (Postfix) with ESMTP id 2A2FB8FC15 for ; Mon, 25 Aug 2008 22:51:50 +0000 (UTC) (envelope-from bb+lists.freebsd.perforce@cyrus.watson.org) Received: from repoman.freebsd.org (localhost [127.0.0.1]) by repoman.freebsd.org (8.14.2/8.14.2) with ESMTP id m7PMpoDE020548 for ; Mon, 25 Aug 2008 22:51:50 GMT (envelope-from bb+lists.freebsd.perforce@cyrus.watson.org) Received: (from perforce@localhost) by repoman.freebsd.org (8.14.2/8.14.1/Submit) id m7PMpokw020546 for perforce@freebsd.org; Mon, 25 Aug 2008 22:51:50 GMT (envelope-from bb+lists.freebsd.perforce@cyrus.watson.org) Date: Mon, 25 Aug 2008 22:51:50 GMT Message-Id: <200808252251.m7PMpokw020546@repoman.freebsd.org> X-Authentication-Warning: repoman.freebsd.org: perforce set sender to bb+lists.freebsd.perforce@cyrus.watson.org using -f From: Robert Watson To: Perforce Change Reviews Cc: Subject: PERFORCE change 148469 for review X-BeenThere: p4-projects@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: p4 projects tree changes List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 25 Aug 2008 22:51:50 -0000 http://perforce.freebsd.org/chv.cgi?CH=148469 Change 148469 by rwatson@rwatson_fledge on 2008/08/25 22:51:04 A few further updates to the Audit and MAC page, as well as explicit pointers to the documentation page. Affected files ... .. //depot/projects/trustedbsd/www/audit.page#9 edit .. //depot/projects/trustedbsd/www/mac.page#6 edit Differences ... ==== //depot/projects/trustedbsd/www/audit.page#9 (text+ko) ==== @@ -29,7 +29,7 @@ - $P4: //depot/projects/trustedbsd/www/audit.page#8 $ + $P4: //depot/projects/trustedbsd/www/audit.page#9 $ @@ -71,6 +71,10 @@ OpenBSM is maintained by the TrustedBSD Project, and new versions are imported into the FreeBSD CVS repository intermittently.

+

Security event auditing user documentation and an implementation + paper may be found on the documentation + page.

+

BSMtrace is an audit-based host intrusion detection system.

==== //depot/projects/trustedbsd/www/mac.page#6 (text+ko) ==== @@ -37,7 +37,7 @@ - $P4: //depot/projects/trustedbsd/www/mac.page#5 $ + $P4: //depot/projects/trustedbsd/www/mac.page#6 $ @@ -66,11 +66,16 @@ FreeBSD-based products make use of the TrustedBSD MAC Framework to locally modify the operating system security policy.

+

MAC Framework and general MAC user documentation and a number of + implementation papers may be found on the documentation page.

+

The TrustedBSD MAC Framework is also present in Mac OS X as of the Leopard release, where it is used to implement - Seatbelt and other system security services. A port of FLASK and - SELinux is also available via SEDarwin.

+ Seatbelt and other system security services. The port of the MAC + Framework was performed initially as part of SEDarwin, which also included a port of + FLASK and SELinux to the Mac OS X platform.