freebsd-nq/lib/libugidfw/Makefile

# $FreeBSD$

LIB=		ugidfw
SHLIB_MAJOR=	1
SRCS=		ugidfw.c
INCS=		ugidfw.h

MAN+=		bsde_get_rule.3 bsde_get_rule_count.3 bsde_parse_rule.3 \
		bsde_rule_to_string.3 libugidfw.3

MLINKS= 	bsde_get_rule.3 bsde_add_rule.3
MLINKS= 	bsde_get_rule.3 bsde_delete_rule.3
MLINKS+=	bsde_get_rule.3 bsde_set_rule.3
MLINKS+=	bsde_get_rule_count.3 bsde_get_rule_slots.3
MLINKS+=	bsde_parse_rule.3 bsde_parse_rule_string.3

.include <bsd.lib.mk>
Introduce support for Mandatory Access Control and extensible kernel access control. Provide a library to manage user file system firewall-like rules supported by the mac_bsdextended.ko security model. The kernel module exports the current rule set using sysctl, and this library provides a front end that includes support for retrieving and setting rules, as well as printing and parsing them. Note: as with other userland components, this is a WIP. However, when used in combination with the soon-to-be-committed ugidfw, it can actually be quite useful in multi-user environments to allow the administrator to limit inter-user file operations without resorting to heavier weight labeled security policies. Obtained form: TrustedBSD Project Sponsored by: DARPA, NAI Labs 2002-08-02 07:07:35 +00:00			`# $FreeBSD$`

			`LIB= ugidfw`
			`SHLIB_MAJOR= 1`
			`SRCS= ugidfw.c`
			`INCS= ugidfw.h`

Document the file system firewall interface library functions. Sponsored by: DARPA, Network Associates Laboratories 2003-01-07 11:23:43 +00:00			`MAN+= bsde_get_rule.3 bsde_get_rule_count.3 bsde_parse_rule.3 \`
			`bsde_rule_to_string.3 libugidfw.3`

Add bsde_add_rule(), which is similar to bsde_set_rule() except that the caller does not specify the rule number -- instead, the kernel module is probed for the next available rule, which is then used. Obtained from: TrustedBSD Project Sponsored by: DARPA, McAfee Research 2004-02-25 03:24:39 +00:00			`MLINKS= bsde_get_rule.3 bsde_add_rule.3`
Document the file system firewall interface library functions. Sponsored by: DARPA, Network Associates Laboratories 2003-01-07 11:23:43 +00:00			`MLINKS= bsde_get_rule.3 bsde_delete_rule.3`
			`MLINKS+= bsde_get_rule.3 bsde_set_rule.3`
			`MLINKS+= bsde_get_rule_count.3 bsde_get_rule_slots.3`
			`MLINKS+= bsde_parse_rule.3 bsde_parse_rule_string.3`

Introduce support for Mandatory Access Control and extensible kernel access control. Provide a library to manage user file system firewall-like rules supported by the mac_bsdextended.ko security model. The kernel module exports the current rule set using sysctl, and this library provides a front end that includes support for retrieving and setting rules, as well as printing and parsing them. Note: as with other userland components, this is a WIP. However, when used in combination with the soon-to-be-committed ugidfw, it can actually be quite useful in multi-user environments to allow the administrator to limit inter-user file operations without resorting to heavier weight labeled security policies. Obtained form: TrustedBSD Project Sponsored by: DARPA, NAI Labs 2002-08-02 07:07:35 +00:00			`.include <bsd.lib.mk>`