From owner-p4-projects@FreeBSD.ORG Tue Dec 30 12:15:46 2003 Return-Path: Delivered-To: p4-projects@freebsd.org Received: by hub.freebsd.org (Postfix, from userid 32767) id 3FB7716A4D0; Tue, 30 Dec 2003 12:15:46 -0800 (PST) Delivered-To: perforce@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 16A4F16A4CE for ; Tue, 30 Dec 2003 12:15:46 -0800 (PST) Received: from repoman.freebsd.org (repoman.freebsd.org [216.136.204.115]) by mx1.FreeBSD.org (Postfix) with ESMTP id 5753243D2D for ; Tue, 30 Dec 2003 12:15:43 -0800 (PST) (envelope-from cvance@nailabs.com) Received: from repoman.freebsd.org (localhost [127.0.0.1]) by repoman.freebsd.org (8.12.10/8.12.10) with ESMTP id hBUKFh0B037080 for ; Tue, 30 Dec 2003 12:15:43 -0800 (PST) (envelope-from cvance@nailabs.com) Received: (from perforce@localhost) by repoman.freebsd.org (8.12.10/8.12.10/Submit) id hBUKFgCk037077 for perforce@freebsd.org; Tue, 30 Dec 2003 12:15:42 -0800 (PST) (envelope-from cvance@nailabs.com) Date: Tue, 30 Dec 2003 12:15:42 -0800 (PST) Message-Id: <200312302015.hBUKFgCk037077@repoman.freebsd.org> X-Authentication-Warning: repoman.freebsd.org: perforce set sender to cvance@nailabs.com using -f From: Chris Vance To: Perforce Change Reviews Subject: PERFORCE change 44563 for review X-BeenThere: p4-projects@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: p4 projects tree changes List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 30 Dec 2003 20:15:46 -0000 http://perforce.freebsd.org/chv.cgi?CH=44563 Change 44563 by cvance@cvance_sony on 2003/12/30 12:14:48 Make the jump and boot the SEBSD module after installation Affected files ... .. //depot/projects/trustedbsd/sebsd/sys/boot/forth/loader.conf.sebsd#2 edit Differences ... ==== //depot/projects/trustedbsd/sebsd/sys/boot/forth/loader.conf.sebsd#2 (text+ko) ==== @@ -1,11 +1,12 @@ # uncomment the next line enable the MAC framework -#kernel="MAC" # /boot sub-directory containing kernel and modules +kernel="MAC" # /boot sub-directory containing kernel and modules # uncomment the next line enable the sebsd module -# sebsd_load="YES" # Security-Enhanced BSD module +sebsd_load="YES" # Security-Enhanced BSD module # uncomment the next line to allow the bootloader to load the SEBSD policy # This is required for the SEBSD module to boot -#sebsdpolicy_load="YES" -sebsdpolicy_type="sebsd_policy" -sebsdpolicy_name="/etc/security/sebsd/policy.16" +sebsdpolicy_load="YES" + +# Default SEBSD policy location: +#sebsdpolicy_name="/etc/security/sebsd/policy.16"