From owner-p4-projects@FreeBSD.ORG Thu May 6 13:43:29 2004 Return-Path: Delivered-To: p4-projects@freebsd.org Received: by hub.freebsd.org (Postfix, from userid 32767) id D75C916A4D0; Thu, 6 May 2004 13:43:28 -0700 (PDT) Delivered-To: perforce@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id B108E16A4CE for ; Thu, 6 May 2004 13:43:28 -0700 (PDT) Received: from repoman.freebsd.org (repoman.freebsd.org [216.136.204.115]) by mx1.FreeBSD.org (Postfix) with ESMTP id 82C6543D46 for ; Thu, 6 May 2004 13:43:28 -0700 (PDT) (envelope-from bb+lists.freebsd.perforce@cyrus.watson.org) Received: from repoman.freebsd.org (localhost [127.0.0.1]) by repoman.freebsd.org (8.12.10/8.12.10) with ESMTP id i46KhSGe094518 for ; Thu, 6 May 2004 13:43:28 -0700 (PDT) (envelope-from bb+lists.freebsd.perforce@cyrus.watson.org) Received: (from perforce@localhost) by repoman.freebsd.org (8.12.10/8.12.10/Submit) id i46KhSX5094515 for perforce@freebsd.org; Thu, 6 May 2004 13:43:28 -0700 (PDT) (envelope-from bb+lists.freebsd.perforce@cyrus.watson.org) Date: Thu, 6 May 2004 13:43:28 -0700 (PDT) Message-Id: <200405062043.i46KhSX5094515@repoman.freebsd.org> X-Authentication-Warning: repoman.freebsd.org: perforce set sender to bb+lists.freebsd.perforce@cyrus.watson.org using -f From: Robert Watson To: Perforce Change Reviews Subject: PERFORCE change 52375 for review X-BeenThere: p4-projects@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: p4 projects tree changes List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 06 May 2004 20:43:29 -0000 http://perforce.freebsd.org/chv.cgi?CH=52375 Change 52375 by rwatson@rwatson_tislabs on 2004/05/06 13:43:26 A bit more fleshing, contact address. Affected files ... .. //depot/projects/trustedbsd/sedarwin73/README#7 edit Differences ... ==== //depot/projects/trustedbsd/sedarwin73/README#7 (text+ko) ==== @@ -1,8 +1,5 @@ SEDarwin - Security-Enhanced Darwin Prototype - -Andrew Reisse (areisse@nailabs.com) -Chris Vance (cvance@nailabs.com) -Robert Watson (rwatson@nailabs.com) + SEDarwin Team McAfee Research @@ -10,7 +7,7 @@ 7.3 (MacOSX 10.3.3). It includes the following modifications relative to the Apple Darwin 7.3 release: -- HFS extended attributes +- HFS extended attributes. - A subset of the MAC Framework labeling and protecting files and processes, as well as initial labeling and controls for Mach IPC. - A port of the mac_test policy module. @@ -33,9 +30,9 @@ Package Layout: bootstrap_instructions.txt Instructions for building and installing +export (created) Location of build results Makeconfig Build environment configuration Makefile Top level Makefile to build system -export (created) Location of build results apsl/file_cmds File commands, including modified ls(1) apsl/xnu XNU kernel sources @@ -66,6 +63,8 @@ system, labels begin with the name of the policy module (in this case, sebsd). Objects use the object_r "role". +Some sample usage to illustrate protections being enforced: + $ getpmac sebsd/andrew:user_r:user_d $ touch test_readonly