PERFORCE change 80607 for review
Robert Watson
rwatson at FreeBSD.org
Wed Jul 20 16:25:23 GMT 2005
http://perforce.freebsd.org/chv.cgi?CH=80607
Change 80607 by rwatson at rwatson_paprika on 2005/07/20 16:25:20
Add brief descriptions of a number of library calls and command
line utilities.
Affected files ...
.. //depot/projects/trustedbsd/sedarwin7/docs/apiabi.txt#2 edit
Differences ...
==== //depot/projects/trustedbsd/sedarwin7/docs/apiabi.txt#2 (text+ko) ====
@@ -155,47 +155,168 @@
New System Library Interfaces - libextattr
int extattr_namespace_to_string();
+
+Convert an extended attribute name space identifier to a text string.
+
int extattr_string_to_namespace();
+
+Convert an extended attribute name space string to a number identifier.
+
int extattrctl();
+
+Manage extended attributes on a file system.
+
int extattr_delete_fd();
+
+Delete an extended attribute on a file by file descriptor.
+
int extattr_delete_file();
+
+Delete an extended attribute on a file by path.
+
int extattr_delete_link();
+
+Delete an extended attribute on a file by path; do not follow symbolic links.
+
ssize_t extattr_get_fd();
+
+Retrieve an extended attribute on a file by file descriptor.
+
ssize_t extattr_get_file();
+
+Retrieve an extended attribute on a file by path.
+
ssize_t extattr_get_link();
+
+Retrieve an extended attribute on a file by path; do not follow symbolic
+links.
+
int extattr_set_fd();
+
+Set an extended attribute on a file by file descriptor.
+
int extattr_set_file();
+
+Set an extended attribute on a file by path.
+
int extattr_set_link();
+
+Set an extended attribute on a file by path; do not follow symbolic links.
+
ssize_t extattr_list_file();
+
+List extended attributes on a file by path.
+
ssize_t extattr_list_link();
+
+List extended attributes on a file by path; do not follow symbolic links.
+
ssize_t extattr_list_fd();
+List extended attributes on a file by file descriptor.
+
New System Library Interfaces - libmac
int mac_reload()
+
+Cause the user space MAC Framework to reload its label configuration from
+mac.conf.
+
int mac_free()
+
+Free a user space MAC label.
+
int mac_from_text()
+
+Convert a text representation label to a user space MAC label.
+
int mac_to_text()
+
+Convert a user space MAC label to a text representation.
+
int mac_prepare()
+
+Prepare storage for a user space MAC label.
+
int mac_prepare_type()
+
+Prepare storage for a user space MAC label intended for use with a particular
+object type.
+
int mac_prepare_ifnet_label()
+
+Deprecated: prepare storage for a user space MAC label intended for use with
+network interface.
+
int mac_prepare_file_label()
+
+Deprecated: prepare storage for a user space MAC label intended for use with
+a file.
+
int mac_prepare_packet_label()
+
+Deprecated: prepare storage for a user space MAC label intended for use with
+a network packet.
+
int mac_prepare_process_label()
+
+Deprecated: prepare storage for a user space MAC label intenedd for use with
+a process.
+
int mac_is_present()
+
+Check with MAC support is loaded, and if so, whether a specified policy is
+present.
+
int mac_syscall()
+
+Multiplexor MAC policy system call.
+
int mac_execve()
+
+Execute a file and request a specific MAC label transition as part of
+execution.
+
int mac_get_fd()
+
+Retrieve the MAC label on a file by file descriptor.
+
int mac_get_file()
+
+Retrieve the MAC label on a file by file path.
+
int mac_get_link()
+
+Retrieve the MAC label on a file by file path; do not follow symbolic links.
+
int mac_get_pid()
+
+Retrieve the MAC label on the current process.
+
int mac_get_proc()
+
+Retrieve the MAC label on another process.
+
int mac_get_peer()
+
+Retrieve the MAC label of the remote endpoint of a communications socket.
+
int mac_set_fd()
+
+Set the MAC label on a file by file descriptor.
+
int mac_set_file()
+
+Set the MAC label on a file by file path.
+
int mac_set_link()
+
+Set the MAC label on a file by file path; do not follow symbolic links.
+
int mac_set_proc()
+Set the MAC label on the current process.
+
New System Library Interfaces - SEDarwin
XXX
@@ -203,18 +324,44 @@
New Command Line Utilities - extattr_cmds
getextattr(8)
+
+Retrieve extended attributes on a file.
+
lsextattr(8)
+
+List extended attributes on a file.
+
rmextattr(8)
+
+Remove extended attributes from a file.
+
setextattr(8)
+Set extended attributes on a file.
+
New Command Line Utilities - mac_cmds
getfmac(8)
+
+Retrieve the MAC label of a file.
+
getpmac(8)
+
+Retrieve the MAC label of the current process.
+
mexec(8)
+
+Run a program and transition to the requested MAC label.
+
setfsmac(8)
+
+Set the MAC label of a file, optionally with using a label specification
+database.
+
setpmac(8)
+Set the MAC label of the current process, then execute a command.
+
New Command Line Utilities - SEDarwin
checkpolicy(8)
@@ -230,8 +377,13 @@
Modifications to Existing Command Line Utilities
ls(1)
+
+File list utility; modified to query MAC labels when -Z is used.
+
ps(1)
+Process list utility; modified to query MAC labels when -Z is used.
+
MAC Framework Policy Entry Points
XXX
To Unsubscribe: send mail to majordomo at trustedbsd.org
with "unsubscribe trustedbsd-cvs" in the body of the message
More information about the trustedbsd-cvs
mailing list