diff options
Diffstat (limited to 'static/freebsd/man4/mac_partition.4 3.html')
| -rw-r--r-- | static/freebsd/man4/mac_partition.4 3.html | 95 |
1 files changed, 0 insertions, 95 deletions
diff --git a/static/freebsd/man4/mac_partition.4 3.html b/static/freebsd/man4/mac_partition.4 3.html deleted file mode 100644 index a287bc55..00000000 --- a/static/freebsd/man4/mac_partition.4 3.html +++ /dev/null @@ -1,95 +0,0 @@ -<table class="head"> - <tr> - <td class="head-ltitle">MAC_PARTITION(4)</td> - <td class="head-vol">Device Drivers Manual</td> - <td class="head-rtitle">MAC_PARTITION(4)</td> - </tr> -</table> -<div class="manual-text"> -<section class="Sh"> -<h1 class="Sh" id="NAME"><a class="permalink" href="#NAME">NAME</a></h1> -<p class="Pp"><code class="Nm">mac_partition</code> — - <span class="Nd">process partition policy</span></p> -</section> -<section class="Sh"> -<h1 class="Sh" id="SYNOPSIS"><a class="permalink" href="#SYNOPSIS">SYNOPSIS</a></h1> -<p class="Pp">To compile the process partition policy into your kernel, place - the following lines in your kernel configuration file:</p> -<div class="Bd Pp Bd-indent"><code class="Cd">options MAC</code> -<br/> -<code class="Cd">options MAC_PARTITION</code></div> -<p class="Pp">Alternately, to load the process partition module at boot time, - place the following line in your kernel configuration file:</p> -<div class="Bd Pp Bd-indent"><code class="Cd">options MAC</code></div> -<p class="Pp">and in <a class="Xr">loader.conf(5)</a>:</p> -<div class="Bd Pp Bd-indent Li"> -<pre>mac_partition_load="YES"</pre> -</div> -</section> -<section class="Sh"> -<h1 class="Sh" id="DESCRIPTION"><a class="permalink" href="#DESCRIPTION">DESCRIPTION</a></h1> -<p class="Pp">The <code class="Nm">mac_partition</code> policy module implements - a process partition policy, which allows administrators to place running - processes into “partitions”, based on their numeric process - partition (specified in the process's MAC label). Processes with a specified - partition can only see processes that are in the same partition. If no - partition is specified for a process, it can see all other processes in the - system (subject to other MAC policy restrictions not defined in this man - page). No provisions for placing processes into multiple partitions are - available.</p> -<section class="Ss"> -<h2 class="Ss" id="Label_Format"><a class="permalink" href="#Label_Format">Label - Format</a></h2> -<p class="Pp">Partition labels take on the following format:</p> -<p class="Pp"></p> -<div class="Bd - Bd-indent"><code class="Li"><code class="Li">partition/</code><var class="Ar">value</var></code></div> -<p class="Pp">Where <var class="Ar">value</var> can be any integer value or - “<code class="Li">none</code>”. For example:</p> -<div class="Bd Pp Bd-indent Li"> -<pre>partition/1 -partition/20 -partition/none</pre> -</div> -</section> -</section> -<section class="Sh"> -<h1 class="Sh" id="SEE_ALSO"><a class="permalink" href="#SEE_ALSO">SEE - ALSO</a></h1> -<p class="Pp"><a class="Xr">mac(4)</a>, <a class="Xr">mac_biba(4)</a>, - <a class="Xr">mac_bsdextended(4)</a>, <a class="Xr">mac_ddb(4)</a>, - <a class="Xr">mac_ifoff(4)</a>, <a class="Xr">mac_lomac(4)</a>, - <a class="Xr">mac_mls(4)</a>, <a class="Xr">mac_none(4)</a>, - <a class="Xr">mac_portacl(4)</a>, <a class="Xr">mac_seeotheruids(4)</a>, - <a class="Xr">mac_test(4)</a>, <a class="Xr">maclabel(7)</a>, - <a class="Xr">mac(9)</a></p> -</section> -<section class="Sh"> -<h1 class="Sh" id="HISTORY"><a class="permalink" href="#HISTORY">HISTORY</a></h1> -<p class="Pp">The <code class="Nm">mac_partition</code> policy module first - appeared in <span class="Ux">FreeBSD 5.0</span> and was developed by the - TrustedBSD Project.</p> -</section> -<section class="Sh"> -<h1 class="Sh" id="AUTHORS"><a class="permalink" href="#AUTHORS">AUTHORS</a></h1> -<p class="Pp">This software was contributed to the - <span class="Ux">FreeBSD</span> Project by Network Associates Labs, the - Security Research Division of Network Associates Inc. under DARPA/SPAWAR - contract N66001-01-C-8035 (“CBOSS”), as part of the DARPA - CHATS research program.</p> -</section> -<section class="Sh"> -<h1 class="Sh" id="BUGS"><a class="permalink" href="#BUGS">BUGS</a></h1> -<p class="Pp">While the MAC Framework design is intended to support the - containment of the root user, not all attack channels are currently - protected by entry point checks. As such, MAC Framework policies should not - be relied on, in isolation, to protect against a malicious privileged - user.</p> -</section> -</div> -<table class="foot"> - <tr> - <td class="foot-date">July 25, 2015</td> - <td class="foot-os">FreeBSD 15.0</td> - </tr> -</table> |