From nobody Tue Jan 20 02:57:58 2026 X-Original-To: dev-commits-src-all@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4dwBpG4dFNz6NqZY for ; Tue, 20 Jan 2026 02:57:58 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R13" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4dwBpG2Gq2z3PpY for ; Tue, 20 Jan 2026 02:57:58 +0000 (UTC) (envelope-from git@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1768877878; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=Q0I7o3F8s3sLZccZgxjhFg8l084ac+iQWBXvuOkBaUY=; b=fuDcirzI30u2FTPZLndVyEAGKT5JMQXeonWfOJ3clK1xzLNJX0GqXrVZVsXxTu4XXuFk6F //56zb1WKNqCLmlceiFgjAan9r1bmOMk4IedFyRZ2OArKZXctMuomTFEbfGZa1RSQyPRm7 Bhgth5HCkZgiMUlRFWMNqlSq3WEiH1f6matY4Znf6yL3IfnfYaQ8PPIgvuPLlMMptZrbld Om7oaLTD4NBNW0xCz5IDhkpKShXgYF93DVBl5tc+7TWjqe638E3v7FW6lxAEE0BwgKedNR PdmvjMLP34fGBR7J+CQi8knW28xQMD2CAaQzBoSkhZJUc6sptq4Ut9mlwY8yyQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1768877878; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=Q0I7o3F8s3sLZccZgxjhFg8l084ac+iQWBXvuOkBaUY=; b=Ghehsz33HTIyrfy/m7TXeRXk+7bEHfLZfqCX2lJ3sbMJd7U3Be7VqUZQvVP/UaHqMp0Gvq nj0/+J0OZBpQxgTLiIhKNFRpjdbNwYjTfl44BdMX/PBQT2BY78BdBKb2IuO4ruhgySz718 g6NVDx4+RMJKXq4LTs5NiwhnsTAoD3rqTxbnwYQ+oEO1eUv1qKv7vnoZP++EX4yvyu10BK KEk5ViRemiLcoIHiw6aIVxlczUC8eN4cBHt2DtkvAvkC/+3uBGDZikYn4sJ2ZmHmpgddp9 rAFnfj+ypr9KptqknkpuS1KtGW892MTLjAuvRrjfwzfmx9uwv6/ZABzRih0bkQ== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1768877878; a=rsa-sha256; cv=none; b=BTSQgLN0F47aiAHPuVw0/TZU7E9+BHTmQwkSCTtpXpFq8ycjP4sNM8wpmOjOXos/yeCUKp yAuUSRDELJjsjPOBg7+XVo1nUJKsWETuzLb4H6Z7f2Omo2UwzdGTIzwgvjBFKeSXscqHJ4 1c66HwCLaVnRpKNQQKN91KNvI06Q8StNWTaH7KCb7mc1rQRvfkdrU7yVRspPRHQz9A4SmY /MTDi78JIr9M+Hc7Lg5T3yk1C2gNdSVjR2OP1HBXn1gZbO6X0/epdU10CagoISOriX+ojp rjv5G96u29uGg7XlpN9ncD+PfG+wXhsIvEllsRVJfekD2qRju2lDKWPMHLFP8A== ARC-Authentication-Results: i=1; mx1.freebsd.org; none Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) by mxrelay.nyi.freebsd.org (Postfix) with ESMTP id 4dwBpG1qyCzyx8 for ; Tue, 20 Jan 2026 02:57:58 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from git (uid 1279) (envelope-from git@FreeBSD.org) id 208b5 by gitrepo.freebsd.org (DragonFly Mail Agent v0.13+ on gitrepo.freebsd.org); Tue, 20 Jan 2026 02:57:58 +0000 To: src-committers@FreeBSD.org, dev-commits-src-all@FreeBSD.org, dev-commits-src-main@FreeBSD.org From: Kyle Evans Subject: git: bef0475b6810 - main - mac(4): also list jails in the example enumeration of objects List-Id: Commit messages for all branches of the src repository List-Archive: https://lists.freebsd.org/archives/dev-commits-src-all List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: dev-commits-src-all@freebsd.org Sender: owner-dev-commits-src-all@FreeBSD.org MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: kevans X-Git-Repository: src X-Git-Refname: refs/heads/main X-Git-Reftype: branch X-Git-Commit: bef0475b6810b9cc725bb786a8100a6e54b54891 Auto-Submitted: auto-generated Date: Tue, 20 Jan 2026 02:57:58 +0000 Message-Id: <696eef36.208b5.1bc20e90@gitrepo.freebsd.org> The branch main has been updated by kevans: URL: https://cgit.FreeBSD.org/src/commit/?id=bef0475b6810b9cc725bb786a8100a6e54b54891 commit bef0475b6810b9cc725bb786a8100a6e54b54891 Author: Kyle Evans AuthorDate: 2026-01-20 02:57:42 +0000 Commit: Kyle Evans CommitDate: 2026-01-20 02:57:42 +0000 mac(4): also list jails in the example enumeration of objects The prison may also be considered part of the subject by way of its ucred association, but I don't think this is significantly different enough today than before recent work -- policies could have always taken them into account, and some did (e.g., mac_bsdextended). Reported by: olce Reviewed by: olce, ziaee Differential Revision: https://reviews.freebsd.org/D54748 --- share/man/man4/mac.4 | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/share/man/man4/mac.4 b/share/man/man4/mac.4 index d7ae30a1bac4..bdb7de018d3d 100644 --- a/share/man/man4/mac.4 +++ b/share/man/man4/mac.4 @@ -28,7 +28,7 @@ .\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF .\" SUCH DAMAGE. .\" -.Dd January 15, 2026 +.Dd January 16, 2026 .Dt MAC 4 .Os .Sh NAME @@ -68,7 +68,7 @@ Currently, the following MAC policy modules are shipped with .El .Ss MAC Labels Each system subject (processes, sockets, etc.) and each system object -(file system objects, sockets, etc.) can carry with it a MAC label. +(file system objects, jails, sockets, etc.) can carry with it a MAC label. MAC labels contain data in an arbitrary format taken into consideration in making access control decisions for a given operation.