Date: Sun, 22 Jul 2012 20:55:36 GMT From: Robert Watson <rwatson@FreeBSD.org> To: Perforce Change Reviews <perforce@freebsd.org> Subject: PERFORCE change 214779 for review Message-ID: <201207222055.q6MKtaZn081239@skunkworks.freebsd.org>
next in thread | raw e-mail | index | archive | help
http://p4web.freebsd.org/@@214779?ac=10 Change 214779 by rwatson@rwatson_fledge on 2012/07/22 20:54:42 Include some additional words on use of the MAC Framework, and a pointer to my dissertation which includes two chapters on its architecture and deployment in products. Affected files ... .. //depot/projects/trustedbsd/www/mac.page#7 edit Differences ... ==== //depot/projects/trustedbsd/www/mac.page#7 (text+ko) ==== @@ -1,5 +1,5 @@ <!-- - Copyright (c) 2000, 2001 Robert N. M. Watson + Copyright (c) 2000-2012 Robert N. M. Watson Copyright (c) 2001 Leigh Denault Copyright (c) 2002, 2003 Networks Associates Technology, Inc. All rights reserved. @@ -37,7 +37,7 @@ <cvs:keywords xmlns:cvs="http://www.FreeBSD.org/XML/CVS" version="1.0"> <cvs:keyword name="freebsd"> - $P4: //depot/projects/trustedbsd/www/mac.page#6 $ + $P4: //depot/projects/trustedbsd/www/mac.page#7 $ </cvs:keyword> </cvs:keywords> @@ -68,14 +68,22 @@ <p>MAC Framework and general MAC user documentation and a number of implementation papers may be found on the <a - href="docs.html">documentation page</a>.</p> + href="docs.html">documentation page</a>. A detailed discussion of + the architecture and industry adoption of the MAC Framework, + including use in FreeBSD and Apple's Mac OS X and iOS, may be found + in Robert Watson's PhD Dissertation, <a + href="http://www.cl.cam.ac.uk/techreports/UCAM-CL-TR-818.html">New + Approaches to Operating System Security Extensibility</a>.</p> - <p>The TrustedBSD MAC Framework is also present in Mac - OS X as of the Leopard release, where it is used to implement - Seatbelt and other system security services. The port of the MAC + <p>The TrustedBSD MAC Framework has also been present in Mac OS X + releases as of "Leopard", where it is used to implement Seatbelt + and other system security services; on the iPhone and iPad, the + MAC Framework is used for App sandboxing. This port of the MAC Framework was performed initially as part of <a href="sedarwin.html">SEDarwin</a>, which also included a port of - FLASK and SELinux to the Mac OS X platform.</p> + FLASK and SELinux to the Mac OS X platform. Other prominent + industry consumers of the MAC Framework include Juniper Networks + and McAfee (now Intel).</p> </html> </section>
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201207222055.q6MKtaZn081239>