PERFORCE change 76581 for review

Scott Long scottl at FreeBSD.org
Thu May 5 20:55:40 GMT 2005


http://perforce.freebsd.org/chv.cgi?CH=76581

Change 76581 by scottl at scottl-x64 on 2005/05/05 20:54:52

	Update the SEBSD install instructions to match the recent changes.

Affected files ...

.. //depot/projects/trustedbsd/sebsd/SEBSD-Installation.txt#2 edit

Differences ...

==== //depot/projects/trustedbsd/sebsd/SEBSD-Installation.txt#2 (text+ko) ====

@@ -1,9 +1,9 @@
 Instructions for installing Security-Enhanced BSD
 
-SEBSD ships as a kernel loadable module that loads into a FreeBSD 5.1
+SEBSD ships as a kernel loadable module that loads into a FreeBSD 6.0
 kernel supporting the TrustedBSD MAC framework
 (http://www.trustedbsd.org/).  The SEBSD installation CD contains a
-modified FreeBSD 5.1 distribution and a MAC kernel.  The installation
+modified FreeBSD 6.0 distribution and a MAC kernel.  The installation
 process installs the FreeBSD operating system, including full source
 code and MAC-aware programs.
 
@@ -16,7 +16,7 @@
 the FreeBSD operating system or the installation process, refer to the
 FreeBSD handbook available at the project website: http://www.freebsd.org/.
 
-1.  Boot the FreeBSD 5.1-SEBSD installation CD; this CD will install
+1.  Boot the FreeBSD 6.0-SEBSD installation CD; this CD will install
     the complete operating system, including kernels, user
     applications, and complete source code.  A series of menus will
     prompt the user how to proceed.
@@ -72,7 +72,7 @@
 4. Inspect the SEBSD policy.  The system comes pre-installed with a
    sample policy, but local changes might be required.  The policy
    source is located in /etc/security/sebsd/policy and the compiled
-   (binary) version is installed in /etc/security/sebsd/policy.16 by
+   (binary) version is installed in /etc/security/sebsd/policy.bin by
    default.  Only the binary version is loaded by the SEBSD module at
    boot time.  An alternate location for the binary policy file may be
    specified at the boot loader or in /boot/loader.conf.
@@ -89,7 +89,11 @@
    loaded into the kernel.  The /sbin/sebsd_loadpolicy program can be
    used instead of a reboot:
 
-	/sbin/sebsd_loadpolicy /etc/security/sebsd/policy.16
+	/sbin/sebsd_loadpolicy /etc/security/sebsd/policy.bin
+
+   Note that policy.bin is installed by default as a symlink to another
+   file.  If you plan to generate your own policy file then you might
+   need to adjust this.
 
 5. Label the file system.  By default, extended attribute support was
    enabled during the install, but the individual files were not
To Unsubscribe: send mail to majordomo at trustedbsd.org
with "unsubscribe trustedbsd-cvs" in the body of the message



More information about the trustedbsd-cvs mailing list