Hook up a sample mac.conf to the install. The sample basically

tells applications to print labels for all of the TrustedBSD-
generated policies, if they are present.

Obtained from:	TrustedBSD Project
Sponsored by:	DARPA, Network Associates Laboratories
This commit is contained in:
Robert Watson 2002-10-22 14:38:49 +00:00
parent 391b1d758d
commit 26c0d98697
2 changed files with 18 additions and 1 deletions

View File

@ -10,7 +10,7 @@ BIN1= amd.map apmd.conf auth.conf \
dhclient.conf fbtab ftpusers gettytab group \
hosts hosts.allow hosts.equiv hosts.lpd \
inetd.conf login.access login.conf \
motd modems netconfig networks newsyslog.conf \
mac.conf motd modems netconfig networks newsyslog.conf \
phones printcap profile protocols \
rc rc.atm rc.devfs rc.diskless1 rc.diskless2 rc.firewall rc.firewall6 \
rc.network rc.network6 rc.pccard rc.sendmail rc.serial rc.shutdown \

17
etc/mac.conf Normal file
View File

@ -0,0 +1,17 @@
#
# $FreeBSD$
#
# TrustedBSD MAC userland policy configuration file. Kernel modules
# export label information, and mac.conf indicates to userland
# applications what defaults they should use in the absense of any
# other user-provided information.
#
#
# Default label set to be used by simple MAC applications
#
default_file_labels ?biba,?mls,?sebsd,?te
default_ifnet_labels ?biba,?mls,?sebsd,?te
default_process_labels ?biba,?mls,?partition,?sebsd,?te