Correct the definition of the multilabel flag: it enables multilabel
MAC support on the file system, if supported, which causes MAC to treat each object as having its own label, rather than using a single label for all objects on the file system. This doesn't have to be used in combination with the tunefs/newfs flags -- it's an alternative.
This commit is contained in:
parent
f72f4d3a9c
commit
90b9e3f199
Notes:
svn2git
2020-12-20 02:59:44 +00:00
svn path=/head/; revision=127435
@ -147,14 +147,19 @@ flag, this is the same as specifying all the options listed in the
|
|||||||
.Xr fstab 5
|
.Xr fstab 5
|
||||||
file for the file system.
|
file for the file system.
|
||||||
.It Cm multilabel
|
.It Cm multilabel
|
||||||
Enable Mandatory Access Control, or MAC.
|
Enable multi-label Mandatory Access Control, or MAC, on the specified file
|
||||||
Must be used in conjunction with the
|
system.
|
||||||
|
If the file system supports multilabel operation, individual labels will
|
||||||
|
be maintained for each object in the file system, rather than using a
|
||||||
|
single label for all obejcts.
|
||||||
|
An alternative to
|
||||||
.Em -l
|
.Em -l
|
||||||
flag in
|
flag in
|
||||||
.Xr tunefs 8 .
|
.Xr tunefs 8 .
|
||||||
See
|
See
|
||||||
.Xr mac 4
|
.Xr mac 4
|
||||||
for more information.
|
for more information, which cause the multilabel mount flag to be set
|
||||||
|
automatically at mount-time.
|
||||||
.It Cm noasync
|
.It Cm noasync
|
||||||
Metadata I/O should be done synchronously, while data I/O should be done
|
Metadata I/O should be done synchronously, while data I/O should be done
|
||||||
asynchronously.
|
asynchronously.
|
||||||
|
Loading…
Reference in New Issue
Block a user