From owner-freebsd-hackers@FreeBSD.ORG Wed Mar 30 15:06:05 2005 Return-Path: Delivered-To: freebsd-hackers@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id A73D016A4CE for ; Wed, 30 Mar 2005 15:06:05 +0000 (GMT) Received: from mail.loquefaltaba.com (78.Red-213-96-97.pooles.rima-tde.net [213.96.97.78]) by mx1.FreeBSD.org (Postfix) with ESMTP id 3708343D4C for ; Wed, 30 Mar 2005 15:06:04 +0000 (GMT) (envelope-from sico@loquefaltaba.com) Received: from localhost (localhost.loquefaltaba.com [127.0.0.1]) by mail.loquefaltaba.com (Postfix) with ESMTP id 88C4FC1BC for ; Wed, 30 Mar 2005 15:42:50 +0200 (CEST) Received: from mail.loquefaltaba.com ([127.0.0.1]) by localhost (sico.loquefaltaba.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 86258-02 for ; Wed, 30 Mar 2005 15:42:49 +0200 (CEST) Received: from webmail.loquefaltaba.com (localhost.loquefaltaba.com [127.0.0.1]) by mail.loquefaltaba.com (Postfix) with ESMTP id EA6F3C1AF for ; Wed, 30 Mar 2005 15:42:48 +0200 (CEST) Received: from 187.red-80-38-105.pooles.rima-tde.net ([80.38.105.187]) (SquirrelMail authenticated user sico) by webmail.loquefaltaba.com with HTTP; Wed, 30 Mar 2005 15:42:48 +0200 (CEST) Message-ID: <2476.80.38.105.187.1112190168.squirrel@webmail.loquefaltaba.com> In-Reply-To: <20050330003901.H7826@geri.cc.fer.hr> References: <20050330003901.H7826@geri.cc.fer.hr> Date: Wed, 30 Mar 2005 15:42:48 +0200 (CEST) From: "David Barbero" To: hackers@freebsd.org User-Agent: SquirrelMail/1.4.4 MIME-Version: 1.0 Content-Type: text/plain;charset=iso-8859-1 Content-Transfer-Encoding: 8bit X-Priority: 3 (Normal) Importance: Normal X-Virus-Scanned: amavisd-new at loquefaltaba.com Subject: Re: MAC (was: A few thoughts...) X-BeenThere: freebsd-hackers@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Technical Discussions relating to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Mar 2005 15:06:05 -0000 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi! See chpter 15 of the handbook http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/mac.html regards. - -- "Linux is for people who hate Windows, BSD is for people who love UNIX" "Social Engineer -> Because there is no patch for human stupidity" Ivan Voras dijo: > In the thread ("A few thoughts..") some problems were mentioned > (disallowing users to start certain binaries) and some solutions (like > putting the /home tree on a dedicated partition and using mount options). > I'm interested could this be done with MAC, and how? There's not much > documentation on *using* FreeBSD MAC capabilities (or I've just > had no luck finding it), so could anyone give some examples, for this > particular case? > > (The above thing can be done with SELinux MAC implementation) > > > -- > Every sufficiently advanced magic is indistinguishable from technology > - Arthur C Anticlarke > > _______________________________________________ > freebsd-hackers@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-hackers > To unsubscribe, send any mail to "freebsd-hackers-unsubscribe@freebsd.org" > -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.0 (FreeBSD) iQIVAwUBQkqs2FzCah3DrEDZAQLKLA//T7PkOHSX+gtna1/VhE7Ix/Muew+spNL7 IvZ60QuCpBm/6u2Tza33FPCSHrq8hXC+9983BS4jexHeGSeAiMIQIEoFgBgtC8wm oVMv8NNlJkKvUX4cIcMxWUCwnzAavvhst1I4NQCwsn1avzMhorHh5dgnJvval6Ka Yoo8ApLSOgMSY5WVuIdtn4yuOCj/NOGDi0PfiLsB9hbSm+VwdU5ay0RkLrjifygC w/am5w2K+yPyZ/z1TyyRe2rPNQ8VystyBnivjfLqK2BKWuC6MTxt1LqvP82diWGP lBDDAwKUNl0DowXZL9325uaww/cQz2MZJlmCOOYwabueKxB78y/KxiTNviPwei2g kX69kpWl7+sLjNLzS1+b0rNC+Ga1iWy5mTqIZ8yii+zd7ChlfwnCsorgYeUW+unf oHfVUgUkJ7CmlXUftBxj9+c2DwcTfhBxH/9GShTLIUZySuFPfgwHhx0XuVrFm83V FgzYFLHw1POmi48wNiPV0RbSsyu64065Nq0pUThngZH8yWaampX8m0mqTUjkFCwP Bq1EtLgyRaBcfl8Y1FctUasSEHNRbPHrSQ839h+zPCgbalsLematAARkdto9nwPz X+v04l/7vyJb+TOPkbMUzpTySwHVsLZ9ztfatuz1GZ78dVVm3di4/JLVB8vMa307 oc9xEpY9EYM= =haid -----END PGP SIGNATURE-----