MAC Biba policy. High marked process can't write to high marked file.

Michael misha at onet.ru
Mon Aug 22 07:00:38 GMT 2005


Robert Watson wrote:

>> test: Permission denied.
>
> %setpmac biba/high echo 1 >> test       # bah!
>
> Remember that the '>>' is evaluated in the parent shell context, not
> the execution context set up by setpmac.  Try doing "setpmac biba/high
> csh" and see how that changes the results when you run the complete
> command in that context?

Yeah, seem it was just my misinterpretation of handbook, I really
appreciate for help ;-)


More information about the freebsd-hackers mailing list