Date: Fri, 28 Nov 2025 17:33:51 +0000 From: Olivier Certner <olce@FreeBSD.org> To: doc-committers@FreeBSD.org, dev-commits-doc-all@FreeBSD.org Subject: git: 0e00bec29a - main - releases/15.0R/relnotes: mac_do(4): Add a commit, improve a description Message-ID: <6929dcff.b8c8.28417ca2@gitrepo.freebsd.org>
index | next in thread | raw e-mail
The branch main has been updated by olce: URL: https://cgit.FreeBSD.org/doc/commit/?id=0e00bec29a58fe0dad2717449faf2d789d21ae29 commit 0e00bec29a58fe0dad2717449faf2d789d21ae29 Author: Olivier Certner <olce@FreeBSD.org> AuthorDate: 2025-11-28 15:18:16 +0000 Commit: Olivier Certner <olce@FreeBSD.org> CommitDate: 2025-11-28 15:18:16 +0000 releases/15.0R/relnotes: mac_do(4): Add a commit, improve a description Sponsored by: The FreeBSD Foundation --- website/content/en/releases/15.0R/relnotes.adoc | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/website/content/en/releases/15.0R/relnotes.adoc b/website/content/en/releases/15.0R/relnotes.adoc index 48a4aefe51..1b54ded2a2 100644 --- a/website/content/en/releases/15.0R/relnotes.adoc +++ b/website/content/en/releases/15.0R/relnotes.adoc @@ -632,7 +632,8 @@ gitref:add521c1a5d2[repository=src], gitref:2a20ce91dc29[repository=src], gitref:fa4352b74580[repository=src], gitref:3d8d91a5b32c[repository=src], -gitref:8f7e8726e3f5[repository=src] +gitref:8f7e8726e3f5[repository=src], +gitref:89958992b618[repository=src] (Sponsored by The FreeBSD Foundation.) man:mac_do[4] now supports changing rules within jails with the `security.mac.do.rules` man:sysctl[8] knob. @@ -649,8 +650,7 @@ Support multiple users and groups as single rule's targets in man:mac_do[4]. Supporting group targets is a requirement for man:mac_do[4] to be able to enforce a limited set of valid new groups in the target credentials and to allow group-only credentials transitions. The allowed groups are tied to one or multiple user IDs. Multiple users and groups in a rule's target part are treated as alternatives (inclusive disjunction), except for the clauses expressing the mandatory presence or absence of a supplementary group. -The rules syntax has been changed incompatibly. -Migrating existing rules is just a matter of adding `uid=` in front of the target part, substituting commas (`,`) with semi-colons (`;`) and colons (`:`) with greater-than signs (`>`). +The rules syntax has been changed incompatibly, but migrating existing rules is just a matter of adding `uid=` in front of the target part, substituting commas (`,`) with semi-colons (`;`) and colons (`:`) with greater-than signs (`>`). Please consult the man:mac_do[4] manual page for more information. gitref:83ffc412b2e9[repository=src], gitref:8f7e8726e3f5[repository=src],help
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?6929dcff.b8c8.28417ca2>