MAC Biba policy. High marked process can't write to high marked file.

Robert Watson rwatson at FreeBSD.org
Sun Aug 21 15:34:36 GMT 2005


On Sun, 21 Aug 2005, Michael wrote:

> %setpmac biba/high echo 1 >> test       # bah!
> test: Permission denied.

Remember that the '>>' is evaluated in the parent shell context, not the 
execution context set up by setpmac.  Try doing "setpmac biba/high csh" 
and see how that changes the results when you run the complete command in 
that context?

Robert N M Watson


More information about the freebsd-hackers mailing list