Skip site navigation (1)Skip section navigation (2)

FreeBSD Manual Pages

  
 
  

home | help
MAC(3)			 BSD Library Functions Manual			MAC(3)

NAME
     mac -- introduction to the	POSIX.1e MAC security API

LIBRARY
     Standard C	Library	(libc, -lc)

SYNOPSIS
     #include <sys/mac.h>

     In	the kernel configuration file:
     options MAC

DESCRIPTION
     FreeBSD permits administrators to define Mandatory	Access Control labels
     defining levels for the privacy and integrity of data, overriding discre-
     tionary policies for those	objects.  Not all objects currently provide
     support for MAC labels, and MAC support must be explicitly	enabled	by the
     administrator.  The library calls include routines	to retrieve, dupli-
     cate, and set MAC labels associated with files and	processes.

     POSIX.1e describes	a set of MAC manipulation routines to manage the con-
     tents of MAC labels, as well as their relationships with files and	pro-
     cesses; almost all	of these support routines are implemented in FreeBSD.

     Available functions, sorted by behavior, include:

     mac_get_fd()
	     This function is described	in mac_get(3), and may be used to re-
	     trieve the	MAC label associated with a specific file descriptor.

     mac_get_file()
	     This function is described	in mac_get(3), and may be used to re-
	     trieve the	MAC label associated with a named file.

     mac_get_proc()
	     This function is described	in mac_get(3), and may be used to re-
	     trieve the	MAC label associated with the calling process.

     mac_set_fd()
	     This function is described	in mac_set(3), and may be used to set
	     the MAC label associated with a specific file descriptor.

     mac_set_file()
	     This function is described	in mac_set(3), and may be used to set
	     the MAC label associated with a named file.

     mac_set_proc()
	     This function is described	in mac_set(3), and may be used to set
	     the MAC label associated with the calling process.

     mac_free()
	     This function is described	in mac_free(3),	and may	be used	to
	     free userland working MAC label storage.

     mac_from_text()
	     This function is described	in mac_text(3),	and may	be used	to
	     convert a text-form MAC label into	a working mac_t.

     mac_to_text()
	     This function is described	in mac_text(3),	and may	be used	to
	     convert a mac_t into a text-form MAC label.

IMPLEMENTATION NOTES
     FreeBSD's support for POSIX.1e interfaces and features is currently under
     development.

SEE ALSO
     mac(3), mac_free(3), mac_get(3), mac_prepare(3), mac_set(3), mac_text(3),
     mac(4), mac(9)

STANDARDS
     POSIX.1e is described in IEEE POSIX.1e draft 17.  Discussion of the draft
     continues on the cross-platform POSIX.1e implementation mailing list.  To
     join this list, see the FreeBSD POSIX.1e implementation page for more in-
     formation.

HISTORY
     Support for Mandatory Access Control was introduced in FreeBSD 5.0	as
     part of the TrustedBSD Project.

BUGS
     The TrustedBSD MAC	Framework and associated policies, interfaces, and ap-
     plications	are considered to be an	experimental feature in	FreeBSD.
     Sites considering production deployment should keep the experimental sta-
     tus of these services in mind during any deployment process.  See also
     mac(9) for	related	considerations regarding the kernel framework.

BSD			       December	21, 2001			   BSD

NAME | LIBRARY | SYNOPSIS | DESCRIPTION | IMPLEMENTATION NOTES | SEE ALSO | STANDARDS | HISTORY | BUGS

Want to link to this manual page? Use this URL:
<https://www.freebsd.org/cgi/man.cgi?query=mac&sektion=3&manpath=FreeBSD+5.0-RELEASE>

home | help