MAC_PORTACL Not Allowing Non-Super User Access to Port

Jon Passki jon.passki at
Thu May 28 17:15:52 UTC 2009


Full documentation here:

Gist of it is that I enabled MAC_PORTACL and MAC, rebuilt the kernel
and installed it for testing.  I was not able to get a non-super user
to open up a privileged port, though.

What am I doing wrong?

[2136] ~> sysctl -a security.mac
security.mac.max_slots: 4
security.mac.version: 3
security.mac.mmap_revocation_via_cow: 0
security.mac.mmap_revocation: 1
security.mac.portacl.port_high: 1023
security.mac.portacl.autoport_exempt: 1
security.mac.portacl.suser_exempt: 1
security.mac.portacl.enabled: 1
[2136] ~> id
uid=1001(foo) gid=0(wheel) groups=0(wheel)
[2136] ~> sudo sysctl security.mac.portacl.rules=uid:1001:tcp:80
security.mac.portacl.rules:  -> uid:1001:tcp:80
[2136] ~> nc -l 80
nc: Permission denied



More information about the freebsd-questions mailing list