svn commit: r285873 - in head: lib/libc/posix1e share/man/man4 share/man/man9

Edward Tomasz Napierala trasz at FreeBSD.org
Sat Jul 25 15:56:55 UTC 2015 

Author: trasz
Date: Sat Jul 25 15:56:49 2015
New Revision: 285873
URL: https://svnweb.freebsd.org/changeset/base/285873

Log:
  Update Capsicum and Mandatory Access Control manual pages
  to no longer claim they are experimental.
  
  Reviewed by:	rwatson@, wblock@
  MFC after:	1 week
  Sponsored by:	The FreeBSD Foundation
  Differential Revision:	https://reviews.freebsd.org/D2985

Modified:
  head/lib/libc/posix1e/mac.3
  head/lib/libc/posix1e/mac.conf.5
  head/share/man/man4/capsicum.4
  head/share/man/man4/mac.4
  head/share/man/man4/mac_ifoff.4
  head/share/man/man4/mac_mls.4
  head/share/man/man4/mac_none.4
  head/share/man/man4/mac_partition.4
  head/share/man/man4/mac_seeotheruids.4
  head/share/man/man4/mac_stub.4
  head/share/man/man4/mac_test.4
  head/share/man/man4/procdesc.4
  head/share/man/man9/mac.9

Modified: head/lib/libc/posix1e/mac.3
==============================================================================
--- head/lib/libc/posix1e/mac.3	Sat Jul 25 15:00:14 2015	(r285872)
+++ head/lib/libc/posix1e/mac.3	Sat Jul 25 15:56:49 2015	(r285873)
@@ -31,7 +31,7 @@
 .\"
 .\" $FreeBSD$
 .\"
-.Dd August 7, 2009
+.Dd July 25, 2015
 .Dt MAC 3
 .Os
 .Sh NAME
@@ -163,14 +163,3 @@ Support for Mandatory Access Control was
 as part of the
 .Tn TrustedBSD
 Project.
-.Sh BUGS
-The
-.Tn TrustedBSD
-MAC Framework and associated policies, interfaces, and
-applications are considered to be an experimental feature in
-.Fx .
-Sites considering production deployment should keep the experimental
-status of these services in mind during any deployment process.
-See also
-.Xr mac 9
-for related considerations regarding the kernel framework.

Modified: head/lib/libc/posix1e/mac.conf.5
==============================================================================
--- head/lib/libc/posix1e/mac.conf.5	Sat Jul 25 15:00:14 2015	(r285872)
+++ head/lib/libc/posix1e/mac.conf.5	Sat Jul 25 15:56:49 2015	(r285873)
@@ -29,7 +29,7 @@
 .\"
 .\" $FreeBSD$
 .\"
-.Dd April 19, 2003
+.Dd July 25, 2015
 .Dt MAC.CONF 5
 .Os
 .Sh NAME
@@ -110,14 +110,3 @@ Support for Mandatory Access Control was
 as part of the
 .Tn TrustedBSD
 Project.
-.Sh BUGS
-The
-.Tn TrustedBSD
-MAC Framework and associated policies, interfaces, and
-applications are considered to be an experimental feature in
-.Fx .
-Sites considering production deployment should keep the experimental
-status of these services in mind during any deployment process.
-See also
-.Xr mac 9
-for related considerations regarding the kernel framework.

Modified: head/share/man/man4/capsicum.4
==============================================================================
--- head/share/man/man4/capsicum.4	Sat Jul 25 15:00:14 2015	(r285872)
+++ head/share/man/man4/capsicum.4	Sat Jul 25 15:56:49 2015	(r285873)
@@ -26,7 +26,7 @@
 .\"
 .\" $FreeBSD$
 .\"
-.Dd October 19, 2013
+.Dd July 25, 2015
 .Dt CAPSICUM 4
 .Os
 .Sh NAME
@@ -125,7 +125,3 @@ and
 .An Kris Kennaway Aq Mt kris at FreeBSD.org
 at Google, Inc., and
 .An Pawel Jakub Dawidek Aq Mt pawel at dawidek.net .
-.Sh BUGS
-.Nm
-is considered experimental in
-.Fx .

Modified: head/share/man/man4/mac.4
==============================================================================
--- head/share/man/man4/mac.4	Sat Jul 25 15:00:14 2015	(r285872)
+++ head/share/man/man4/mac.4	Sat Jul 25 15:56:49 2015	(r285873)
@@ -30,7 +30,7 @@
 .\"
 .\" $FreeBSD$
 .\"
-.Dd October 30, 2007
+.Dd July 25, 2015
 .Dt MAC 4
 .Os
 .Sh NAME
@@ -239,14 +239,6 @@ under DARPA/SPAWAR contract N66001-01-C-
 .Pq Dq CBOSS ,
 as part of the DARPA CHATS research program.
 .Sh BUGS
-See
-.Xr mac 9
-concerning appropriateness for production use.
-The
-.Tn TrustedBSD
-MAC Framework is considered experimental in
-.Fx .
-.Pp
 While the MAC Framework design is intended to support the containment of
 the root user, not all attack channels are currently protected by entry
 point checks.

Modified: head/share/man/man4/mac_ifoff.4
==============================================================================
--- head/share/man/man4/mac_ifoff.4	Sat Jul 25 15:00:14 2015	(r285872)
+++ head/share/man/man4/mac_ifoff.4	Sat Jul 25 15:56:49 2015	(r285873)
@@ -30,7 +30,7 @@
 .\"
 .\" $FreeBSD$
 .\"
-.Dd December 10, 2002
+.Dd July 25, 2015
 .Dt MAC_IFOFF 4
 .Os
 .Sh NAME
@@ -118,14 +118,6 @@ under DARPA/SPAWAR contract N66001-01-C-
 .Pq Dq CBOSS ,
 as part of the DARPA CHATS research program.
 .Sh BUGS
-See
-.Xr mac 9
-concerning appropriateness for production use.
-The
-.Tn TrustedBSD
-MAC Framework is considered experimental in
-.Fx .
-.Pp
 While the MAC Framework design is intended to support the containment of
 the root user, not all attack channels are currently protected by entry
 point checks.

Modified: head/share/man/man4/mac_mls.4
==============================================================================
--- head/share/man/man4/mac_mls.4	Sat Jul 25 15:00:14 2015	(r285872)
+++ head/share/man/man4/mac_mls.4	Sat Jul 25 15:56:49 2015	(r285873)
@@ -30,7 +30,7 @@
 .\"
 .\" $FreeBSD$
 .\"
-.Dd December 1, 2002
+.Dd July 25, 2015
 .Dt MAC_MLS 4
 .Os
 .Sh NAME
@@ -236,14 +236,6 @@ Inc.\& under DARPA/SPAWAR contract N6600
 .Pq Dq CBOSS ,
 as part of the DARPA CHATS research program.
 .Sh BUGS
-See
-.Xr mac 9
-concerning appropriateness for production use.
-The
-.Tn TrustedBSD
-MAC Framework is considered experimental in
-.Fx .
-.Pp
 While the MAC Framework design is intended to support the containment of
 the root user, not all attack channels are currently protected by entry
 point checks.

Modified: head/share/man/man4/mac_none.4
==============================================================================
--- head/share/man/man4/mac_none.4	Sat Jul 25 15:00:14 2015	(r285872)
+++ head/share/man/man4/mac_none.4	Sat Jul 25 15:56:49 2015	(r285873)
@@ -30,7 +30,7 @@
 .\"
 .\" $FreeBSD$
 .\"
-.Dd December 1, 2002
+.Dd July 25, 2015
 .Dt MAC_NONE 4
 .Os
 .Sh NAME
@@ -98,14 +98,6 @@ under DARPA/SPAWAR contract N66001-01-C-
 .Pq Dq CBOSS ,
 as part of the DARPA CHATS research program.
 .Sh BUGS
-See
-.Xr mac 9
-concerning appropriateness for production use.
-The
-.Tn TrustedBSD
-MAC Framework is considered experimental in
-.Fx .
-.Pp
 While the MAC Framework design is intended to support the containment of
 the root user, not all attack channels are currently protected by entry
 point checks.

Modified: head/share/man/man4/mac_partition.4
==============================================================================
--- head/share/man/man4/mac_partition.4	Sat Jul 25 15:00:14 2015	(r285872)
+++ head/share/man/man4/mac_partition.4	Sat Jul 25 15:56:49 2015	(r285873)
@@ -30,7 +30,7 @@
 .\"
 .\" $FreeBSD$
 .\"
-.Dd December 9, 2002
+.Dd July 25, 2015
 .Dt MAC_PARTITION 4
 .Os
 .Sh NAME
@@ -118,14 +118,6 @@ under DARPA/SPAWAR contract N66001-01-C-
 .Pq Dq CBOSS ,
 as part of the DARPA CHATS research program.
 .Sh BUGS
-See
-.Xr mac 9
-concerning appropriateness for production use.
-The
-.Tn TrustedBSD
-MAC Framework is considered experimental in
-.Fx .
-.Pp
 While the MAC Framework design is intended to support the containment of
 the root user, not all attack channels are currently protected by entry
 point checks.

Modified: head/share/man/man4/mac_seeotheruids.4
==============================================================================
--- head/share/man/man4/mac_seeotheruids.4	Sat Jul 25 15:00:14 2015	(r285872)
+++ head/share/man/man4/mac_seeotheruids.4	Sat Jul 25 15:56:49 2015	(r285873)
@@ -30,7 +30,7 @@
 .\"
 .\" $FreeBSD$
 .\"
-.Dd October 6, 2005
+.Dd July 25, 2015
 .Dt MAC_SEEOTHERUIDS 4
 .Os
 .Sh NAME
@@ -116,14 +116,6 @@ under DARPA/SPAWAR contract N66001-01-C-
 .Pq Dq CBOSS ,
 as part of the DARPA CHATS research program.
 .Sh BUGS
-See
-.Xr mac 9
-concerning appropriateness for production use.
-The
-.Tn TrustedBSD
-MAC Framework is considered experimental in
-.Fx .
-.Pp
 While the MAC Framework design is intended to support the containment of
 the root user, not all attack channels are currently protected by entry
 point checks.

Modified: head/share/man/man4/mac_stub.4
==============================================================================
--- head/share/man/man4/mac_stub.4	Sat Jul 25 15:00:14 2015	(r285872)
+++ head/share/man/man4/mac_stub.4	Sat Jul 25 15:56:49 2015	(r285873)
@@ -30,7 +30,7 @@
 .\"
 .\" $FreeBSD$
 .\"
-.Dd December 1, 2002
+.Dd July 25, 2015
 .Dt MAC_STUB 4
 .Os
 .Sh NAME
@@ -101,14 +101,6 @@ under DARPA/SPAWAR contract N66001-01-C-
 .Pq Dq CBOSS ,
 as part of the DARPA CHATS research program.
 .Sh BUGS
-See
-.Xr mac 9
-concerning appropriateness for production use.
-The
-.Tn TrustedBSD
-MAC Framework is considered experimental in
-.Fx .
-.Pp
 While the MAC Framework design is intended to support the containment of
 the root user, not all attack channels are currently protected by entry
 point checks.

Modified: head/share/man/man4/mac_test.4
==============================================================================
--- head/share/man/man4/mac_test.4	Sat Jul 25 15:00:14 2015	(r285872)
+++ head/share/man/man4/mac_test.4	Sat Jul 25 15:56:49 2015	(r285873)
@@ -30,7 +30,7 @@
 .\"
 .\" $FreeBSD$
 .\"
-.Dd December 1, 2002
+.Dd July 25, 2015
 .Dt MAC_TEST 4
 .Os
 .Sh NAME
@@ -102,14 +102,6 @@ under DARPA/SPAWAR contract N66001-01-C-
 .Pq Dq CBOSS ,
 as part of the DARPA CHATS research program.
 .Sh BUGS
-See
-.Xr mac 9
-concerning appropriateness for production use.
-The
-.Tn TrustedBSD
-MAC Framework is considered experimental in
-.Fx .
-.Pp
 While the MAC Framework design is intended to support the containment of
 the root user, not all attack channels are currently protected by entry
 point checks.

Modified: head/share/man/man4/procdesc.4
==============================================================================
--- head/share/man/man4/procdesc.4	Sat Jul 25 15:00:14 2015	(r285872)
+++ head/share/man/man4/procdesc.4	Sat Jul 25 15:56:49 2015	(r285873)
@@ -29,7 +29,7 @@
 .\"
 .\" $FreeBSD$
 .\"
-.Dd August 21, 2013
+.Dd July 25, 2015
 .Dt PROCDESC 4
 .Os
 .Sh NAME
@@ -85,7 +85,3 @@ at the University of Cambridge, and
 and
 .An Kris Kennaway Aq Mt kris at FreeBSD.org
 at Google, Inc.
-.Sh BUGS
-.Nm
-is considered experimental in
-.Fx .

Modified: head/share/man/man9/mac.9
==============================================================================
--- head/share/man/man9/mac.9	Sat Jul 25 15:00:14 2015	(r285872)
+++ head/share/man/man9/mac.9	Sat Jul 25 15:56:49 2015	(r285873)
@@ -33,7 +33,7 @@
 .\"
 .\" $FreeBSD$
 .\"
-.Dd July 10, 2006
+.Dd July 25, 2015
 .Dt MAC 9
 .Os
 .Sh NAME
@@ -62,14 +62,6 @@ opportunity to modify security behavior 
 Both consumers of the API (normal kernel services) and security modules
 must be aware of the semantics of the API calls, particularly with respect
 to synchronization primitives (such as locking).
-.Ss Note on Appropriateness for Production Use
-The
-.Tn TrustedBSD
-MAC Framework included in
-.Fx 5.0
-is considered experimental, and should not be deployed in production
-environments without careful consideration of the risks associated with
-the use of experimental operating system features.
 .Ss Kernel Objects Supported by the Framework
 The MAC framework manages labels on a variety of types of in-kernel
 objects, including process credentials, vnodes, devfs_dirents, mount
@@ -232,13 +224,6 @@ Additional contributors include:
 and
 .An Tim Robbins .
 .Sh BUGS
-See the earlier section in this document concerning appropriateness
-for production use.
-The
-.Tn TrustedBSD
-MAC Framework is considered experimental in
-.Fx .
-.Pp
 While the MAC Framework design is intended to support the containment of
 the root user, not all attack channels are currently protected by entry
 point checks.

More information about the svn-src-all mailing list