From nobody Fri Nov 28 17:33:51 2025 X-Original-To: dev-commits-doc-all@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4dJ0lN0qGrz6HvQ9 for ; Fri, 28 Nov 2025 17:33:52 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R12" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4dJ0lM6yGXz3F4B for ; Fri, 28 Nov 2025 17:33:51 +0000 (UTC) (envelope-from git@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1764351232; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=Unwv4uX6zmNkhtsGSbBgMTrDfbfBhxnxnWhjchHNqd8=; b=qIXSnykxXwme4u37Bp5gLxZnY2KXsDNiCizVWxcmWIOn9OeT9OvdxRQbaPwWc7NFZDPPUZ FeTYn+Doz8JorKTVRNU2Z08cPul9OlTpYeD+dfMze7niH8R85BRkKRj1x6BVCqf8IFZ2Yj WAyJEfez7tI5WJtpMV1YFojiIDqedgR9Nu8O8W8bx2XKivbNxCB/C6IRrcHBhTGcmMsYN2 9N83lAl8G52AhNvOLc5wT+5OxjhV5QgepyKw+Gxsc7iFQA4zFia8/uegUm5GUkiEjk1vAd MqAVy3ydHaFf9rRvqqFES8gGoz7eRP7RPw0sPbHXqZ7NrOX491RSMtOiBtG3tA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1764351232; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=Unwv4uX6zmNkhtsGSbBgMTrDfbfBhxnxnWhjchHNqd8=; b=u3GLDAn2ppp39c1CMNSudgQSb2uK4DcLJoD+rdmfB8WQh1zPWW2UwNcycm+j/UhV1H5O1D X/Z9RKIXssjRyE4zrTJgsrpUo9K3R6nxiFOVkh1V8MtfbKWbx0HUILg0wOPUvBw6XP71jP wcMpIXTJ/QWD7oOH3nNw4FMSAGrrYXCIoc2QGQaSWP0x9qeooxUsvcCgo6DCWgwNm8SZpr zJ+s21WBUadiwUfQt/gLMx2PLqxkc8IYrX5LfYzD7xYZGjNiye9X1vS/wiqRdhbfzABwR/ F11UCdiqIgnradedZP9+qU7cCSSYQgIepc5bBm9hGTqHISobDoCYpBJy9LGjxQ== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1764351232; a=rsa-sha256; cv=none; b=wBYoiXgB/bljorbS9X6c9u5g9+uGhyeDrPOWqC8/VufML4cJ76/AJQc8ZmsMsSHgf43AJU fjcMy2fgjMatrfGVIdLcenC9w3wIQGtef3AWZejc6BiBMV2ObJiMIBc0y6eSChDcDJVseX 1rwsi23GdzyMRPvWJto9YqlRhnumZn8NclAQrbh5N7CrdkxjCgxQ/B727l5gS9s8U5r6hR htgiHaIQZeq77xzHdd18wSRoeyHyRidDTgCC7sZ2F7slQI473JGB+7Np8cQe764ZWIOkWm BZSagBRgOw8YF/BTdz9HuJk+GgCyihoExquKepyo/tSdDVDA+ZqZ5bxwL/zvdQ== ARC-Authentication-Results: i=1; mx1.freebsd.org; none Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) by mxrelay.nyi.freebsd.org (Postfix) with ESMTP id 4dJ0lM6Tkdz19nS for ; Fri, 28 Nov 2025 17:33:51 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from git (uid 1279) (envelope-from git@FreeBSD.org) id b8c8 by gitrepo.freebsd.org (DragonFly Mail Agent v0.13+ on gitrepo.freebsd.org); Fri, 28 Nov 2025 17:33:51 +0000 To: doc-committers@FreeBSD.org, dev-commits-doc-all@FreeBSD.org From: Olivier Certner Subject: git: 0e00bec29a - main - releases/15.0R/relnotes: mac_do(4): Add a commit, improve a description List-Id: Commit messages for all branches of the doc repository List-Archive: https://lists.freebsd.org/archives/dev-commits-doc-all List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: dev-commits-doc-all@freebsd.org Sender: owner-dev-commits-doc-all@FreeBSD.org MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: olce X-Git-Repository: doc X-Git-Refname: refs/heads/main X-Git-Reftype: branch X-Git-Commit: 0e00bec29a58fe0dad2717449faf2d789d21ae29 Auto-Submitted: auto-generated Date: Fri, 28 Nov 2025 17:33:51 +0000 Message-Id: <6929dcff.b8c8.28417ca2@gitrepo.freebsd.org> The branch main has been updated by olce: URL: https://cgit.FreeBSD.org/doc/commit/?id=0e00bec29a58fe0dad2717449faf2d789d21ae29 commit 0e00bec29a58fe0dad2717449faf2d789d21ae29 Author: Olivier Certner AuthorDate: 2025-11-28 15:18:16 +0000 Commit: Olivier Certner CommitDate: 2025-11-28 15:18:16 +0000 releases/15.0R/relnotes: mac_do(4): Add a commit, improve a description Sponsored by: The FreeBSD Foundation --- website/content/en/releases/15.0R/relnotes.adoc | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/website/content/en/releases/15.0R/relnotes.adoc b/website/content/en/releases/15.0R/relnotes.adoc index 48a4aefe51..1b54ded2a2 100644 --- a/website/content/en/releases/15.0R/relnotes.adoc +++ b/website/content/en/releases/15.0R/relnotes.adoc @@ -632,7 +632,8 @@ gitref:add521c1a5d2[repository=src], gitref:2a20ce91dc29[repository=src], gitref:fa4352b74580[repository=src], gitref:3d8d91a5b32c[repository=src], -gitref:8f7e8726e3f5[repository=src] +gitref:8f7e8726e3f5[repository=src], +gitref:89958992b618[repository=src] (Sponsored by The FreeBSD Foundation.) man:mac_do[4] now supports changing rules within jails with the `security.mac.do.rules` man:sysctl[8] knob. @@ -649,8 +650,7 @@ Support multiple users and groups as single rule's targets in man:mac_do[4]. Supporting group targets is a requirement for man:mac_do[4] to be able to enforce a limited set of valid new groups in the target credentials and to allow group-only credentials transitions. The allowed groups are tied to one or multiple user IDs. Multiple users and groups in a rule's target part are treated as alternatives (inclusive disjunction), except for the clauses expressing the mandatory presence or absence of a supplementary group. -The rules syntax has been changed incompatibly. -Migrating existing rules is just a matter of adding `uid=` in front of the target part, substituting commas (`,`) with semi-colons (`;`) and colons (`:`) with greater-than signs (`>`). +The rules syntax has been changed incompatibly, but migrating existing rules is just a matter of adding `uid=` in front of the target part, substituting commas (`,`) with semi-colons (`;`) and colons (`:`) with greater-than signs (`>`). Please consult the man:mac_do[4] manual page for more information. gitref:83ffc412b2e9[repository=src], gitref:8f7e8726e3f5[repository=src],