d/freebsd-nq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
df6a67d624
freebsd-nq/lib/libugidfw/Makefile

21 lines
462 B
Makefile
Raw Normal View History

Introduce support for Mandatory Access Control and extensible kernel access control. Provide a library to manage user file system firewall-like rules supported by the mac_bsdextended.ko security model. The kernel module exports the current rule set using sysctl, and this library provides a front end that includes support for retrieving and setting rules, as well as printing and parsing them. Note: as with other userland components, this is a WIP. However, when used in combination with the soon-to-be-committed ugidfw, it can actually be quite useful in multi-user environments to allow the administrator to limit inter-user file operations without resorting to heavier weight labeled security policies. Obtained form: TrustedBSD Project Sponsored by: DARPA, NAI Labs
2002-08-02 07:07:35 +00:00
# $FreeBSD$
First pass through library packaging. Sponsored by: The FreeBSD Foundation
2016-02-04 21:16:35 +00:00
PACKAGE=lib${LIB}
Introduce support for Mandatory Access Control and extensible kernel access control. Provide a library to manage user file system firewall-like rules supported by the mac_bsdextended.ko security model. The kernel module exports the current rule set using sysctl, and this library provides a front end that includes support for retrieving and setting rules, as well as printing and parsing them. Note: as with other userland components, this is a WIP. However, when used in combination with the soon-to-be-committed ugidfw, it can actually be quite useful in multi-user environments to allow the administrator to limit inter-user file operations without resorting to heavier weight labeled security policies. Obtained form: TrustedBSD Project Sponsored by: DARPA, NAI Labs
2002-08-02 07:07:35 +00:00
LIB= ugidfw
Set some internal helpers as static and initialize few variables to silence CLANG WARNINGS. BUMP SHLIB_MAJOR version as the ABI potentially changed. Also run an 'exp run' to double check if any external project are using those functions. Thanks antoine@. PR: 200807 Differential Revision: D2775 Reviewed by: kib, ngie
2015-06-24 01:48:44 +00:00
SHLIB_MAJOR= 5
Introduce support for Mandatory Access Control and extensible kernel access control. Provide a library to manage user file system firewall-like rules supported by the mac_bsdextended.ko security model. The kernel module exports the current rule set using sysctl, and this library provides a front end that includes support for retrieving and setting rules, as well as printing and parsing them. Note: as with other userland components, this is a WIP. However, when used in combination with the soon-to-be-committed ugidfw, it can actually be quite useful in multi-user environments to allow the administrator to limit inter-user file operations without resorting to heavier weight labeled security policies. Obtained form: TrustedBSD Project Sponsored by: DARPA, NAI Labs
2002-08-02 07:07:35 +00:00
SRCS= ugidfw.c
INCS= ugidfw.h
Build lib/ with WARNS=6 by default. Similar to libexec/, do the same with lib/. Make WARNS=6 the norm and lower it when needed. I'm setting WARNS?=0 for secure/. It seems secure/ includes the Makefile.inc provided by lib/. I'm not going to touch that directory. Most of the code there is contributed anyway.
2010-01-02 09:58:07 +00:00
WARNS?= 2
Document the file system firewall interface library functions. Sponsored by: DARPA, Network Associates Laboratories
2003-01-07 11:23:43 +00:00
MAN+= bsde_get_rule.3 bsde_get_rule_count.3 bsde_parse_rule.3 \
bsde_rule_to_string.3 libugidfw.3
Add bsde_add_rule(), which is similar to bsde_set_rule() except that the caller does not specify the rule number -- instead, the kernel module is probed for the next available rule, which is then used. Obtained from: TrustedBSD Project Sponsored by: DARPA, McAfee Research
2004-02-25 03:24:39 +00:00
MLINKS= bsde_get_rule.3 bsde_add_rule.3
Fix typo - link for bsde_add_rule(3) manual page was not created. MFC after: 1 week
2005-03-28 09:38:43 +00:00
MLINKS+= bsde_get_rule.3 bsde_delete_rule.3
Document the file system firewall interface library functions. Sponsored by: DARPA, Network Associates Laboratories
2003-01-07 11:23:43 +00:00
MLINKS+= bsde_get_rule.3 bsde_set_rule.3
MLINKS+= bsde_get_rule_count.3 bsde_get_rule_slots.3
MLINKS+= bsde_parse_rule.3 bsde_parse_rule_string.3
Introduce support for Mandatory Access Control and extensible kernel access control. Provide a library to manage user file system firewall-like rules supported by the mac_bsdextended.ko security model. The kernel module exports the current rule set using sysctl, and this library provides a front end that includes support for retrieving and setting rules, as well as printing and parsing them. Note: as with other userland components, this is a WIP. However, when used in combination with the soon-to-be-committed ugidfw, it can actually be quite useful in multi-user environments to allow the administrator to limit inter-user file operations without resorting to heavier weight labeled security policies. Obtained form: TrustedBSD Project Sponsored by: DARPA, NAI Labs
2002-08-02 07:07:35 +00:00
.include <bsd.lib.mk>
Reference in New Issue Copy Permalink