cvs commit: src/sys/security/mac_biba mac_biba.c
csjp 2005-12-31 05:06:59 UTC
FreeBSD src repository
Introduce a new sysctl variable:
If non-zero, all network interfaces be created with the label:
This is useful where programs which initialize network interfaces
do not have any labeling support. This includes dhclient and ppp. A
long term solution is to add labeling support into dhclient(8)
and ppp(8), and remove this variable.
It should be noted that this behavior is different then setting the:
sysctl variable, as this will create interfaces with a biba/high label.
Lower integrity processes are not able to write to the interface in this
event. The security.mac.biba.interfaces_equal will override
The security.mac.biba.interfaces_equal variable will be set to zero
or disabled by default.
MFC after: 2 weeks
Revision Changes Path
1.91 +6 -1 src/sys/security/mac_biba/mac_biba.c
Received on Sat Dec 31 2005 - 05:07:04 UTC