docs/109105: security.mac.bsdextended.firstmatch_enabled is not enabled

[Remko Lodder]

The following reply was made to PR docs/109105; it has been noted by GNATS.

From: Remko Lodder <remko at FreeBSD.org>
To: "Dr. Markus Waldeck" <waldeck at gmx.de>
Cc: freebsd-gnats-submit at FreeBSD.org
Subject: Re: docs/109105: security.mac.bsdextended.firstmatch_enabled is not
 enabled
Date: Mon, 12 Feb 2007 22:03:01 +0100

 Dr. Markus Waldeck wrote:
 > 
 >> Description:
 > CUSTOM kernel:
 > options MAC
 > kldload mac_bsdextended.ko
 > 
 > % sysctl security.mac.bsdextended.firstmatch_enabled
 > security.mac.bsdextended.firstmatch_enabled: 0
 > 
 > man mac_bsdextended
 > security.mac.bsdextended.firstmatch_enabled
 >         Toggle between the old all rules match functionality and the new
 >         first rule matches functionality.  This is enabled by default.
 > 
 > The value 0 means disabled not enabled!
 >> How-To-Repeat:
 > % sysctl security.mac.bsdextended.firstmatch_enabled
 > 
 > % man mac_bsdextended
 > 
 
 Hello (again),
 
 When are you going to read my emails about asking
 you over and over again, to give these things a bit
 of discussion before you are submitting PR's? A
 little discussion with the developers of the MAC
 framework could give the proper idea about what is
 going on. Perhaps the documentation is OK and the
 code is wrong, or the other way around.
 
 You might think that I am a bit grumpy, and yes I am.
 
 The PR tickets are not for Support questions (Which
 this initially is) but for confirmed problems which
 should be resolved. We cannot resolve this prior to
 have some investigation going on.
 
 So AGAIN: Please ask / discuss these things on the various
 mailinglists before submitting a ticket to make things more
 concrete, this will help FreeBSD, you and others!
 
 Thanks for your understanding and coorporation.
 
 
 
 -- 
 Kind regards,
 
       Remko Lodder               ** remko at elvandar.org
       FreeBSD                    ** remko at FreeBSD.org
 
       /* Quis custodiet ipsos custodes */