problems with MAC labels on files

[Christian Peron]

On Mon, Dec 06, 2010 at 01:35:35AM +0000, Gabor Kovesdan wrote:
> Hi,
> 
> I'm trying to set up an MLS policy but I'm unable to label files. 
> Multi-label option is enabled on /, UFS_EXTATTR and 
> UFS_EXTATTR_AUTOSTART is in the kernel and the MLS module is loaded.
> 
> # uname -a
> FreeBSD .localdomain 8.1-RELEASE FreeBSD 8.1-RELEASE #0: Mon Dec  6 
> 00:20:31 WET 2010     
> gabor at .localdomain:/usr/src/sys/i386/compile/GENERIC  i386
> 
> # setfmac mls/20:1 test
> setfmac: labeling not supported in test
> 
> I've read all the documentation and man pages but I cannot find what 
> else do I have to do to get it working. Could you please tell what I'm 
> missing here?
> 
> Thanks in advance,
> Gabor Kovesdan
> _______________________________________________
> trustedbsd-discuss at FreeBSD.org mailing list
> http://lists.freebsd.org/mailman/listinfo/trustedbsd-discuss
> To unsubscribe, send any mail to 
> "trustedbsd-discuss-unsubscribe at FreeBSD.org"

You need to use tunefs and enable them.

-- 
()  ascii ribbon campaign - against html e-mail 
/\  www.asciiribbon.org   - against proprietary attachments
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 195 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-security/attachments/20101206/094ec1b4/attachment.pgp