PERFORCE change 52375 for review
Robert Watson
rwatson at FreeBSD.org
Thu May 6 20:43:28 GMT 2004
http://perforce.freebsd.org/chv.cgi?CH=52375
Change 52375 by rwatson at rwatson_tislabs on 2004/05/06 13:43:26
A bit more fleshing, contact address.
Affected files ...
.. //depot/projects/trustedbsd/sedarwin73/README#7 edit
Differences ...
==== //depot/projects/trustedbsd/sedarwin73/README#7 (text+ko) ====
@@ -1,8 +1,5 @@
SEDarwin - Security-Enhanced Darwin Prototype
-
-Andrew Reisse (areisse at nailabs.com)
-Chris Vance (cvance at nailabs.com)
-Robert Watson (rwatson at nailabs.com)
+ SEDarwin Team <sedarwin at nailabs.com>
McAfee Research
@@ -10,7 +7,7 @@
7.3 (MacOSX 10.3.3). It includes the following modifications relative
to the Apple Darwin 7.3 release:
-- HFS extended attributes
+- HFS extended attributes.
- A subset of the MAC Framework labeling and protecting files and
processes, as well as initial labeling and controls for Mach IPC.
- A port of the mac_test policy module.
@@ -33,9 +30,9 @@
Package Layout:
bootstrap_instructions.txt Instructions for building and installing
+export (created) Location of build results
Makeconfig Build environment configuration
Makefile Top level Makefile to build system
-export (created) Location of build results
apsl/file_cmds File commands, including modified ls(1)
apsl/xnu XNU kernel sources
@@ -66,6 +63,8 @@
system, labels begin with the name of the policy module (in this case,
sebsd). Objects use the object_r "role".
+Some sample usage to illustrate protections being enforced:
+
$ getpmac
sebsd/andrew:user_r:user_d
$ touch test_readonly
To Unsubscribe: send mail to majordomo at trustedbsd.org
with "unsubscribe trustedbsd-cvs" in the body of the message
More information about the trustedbsd-cvs
mailing list