Date: Thu, 6 May 2004 13:43:28 -0700 (PDT) From: Robert Watson <rwatson@FreeBSD.org> To: Perforce Change Reviews <perforce@freebsd.org> Subject: PERFORCE change 52375 for review Message-ID: <200405062043.i46KhSX5094515@repoman.freebsd.org>
next in thread | raw e-mail | index | archive | help
http://perforce.freebsd.org/chv.cgi?CH=52375 Change 52375 by rwatson@rwatson_tislabs on 2004/05/06 13:43:26 A bit more fleshing, contact address. Affected files ... .. //depot/projects/trustedbsd/sedarwin73/README#7 edit Differences ... ==== //depot/projects/trustedbsd/sedarwin73/README#7 (text+ko) ==== @@ -1,8 +1,5 @@ SEDarwin - Security-Enhanced Darwin Prototype - -Andrew Reisse (areisse@nailabs.com) -Chris Vance (cvance@nailabs.com) -Robert Watson (rwatson@nailabs.com) + SEDarwin Team <sedarwin@nailabs.com> McAfee Research @@ -10,7 +7,7 @@ 7.3 (MacOSX 10.3.3). It includes the following modifications relative to the Apple Darwin 7.3 release: -- HFS extended attributes +- HFS extended attributes. - A subset of the MAC Framework labeling and protecting files and processes, as well as initial labeling and controls for Mach IPC. - A port of the mac_test policy module. @@ -33,9 +30,9 @@ Package Layout: bootstrap_instructions.txt Instructions for building and installing +export (created) Location of build results Makeconfig Build environment configuration Makefile Top level Makefile to build system -export (created) Location of build results apsl/file_cmds File commands, including modified ls(1) apsl/xnu XNU kernel sources @@ -66,6 +63,8 @@ system, labels begin with the name of the policy module (in this case, sebsd). Objects use the object_r "role". +Some sample usage to illustrate protections being enforced: + $ getpmac sebsd/andrew:user_r:user_d $ touch test_readonly
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200405062043.i46KhSX5094515>