diff options
| author | Kyle Evans <kevans@FreeBSD.org> | 2026-01-20 02:57:42 +0000 |
|---|---|---|
| committer | Kyle Evans <kevans@FreeBSD.org> | 2026-01-20 02:57:42 +0000 |
| commit | bef0475b6810b9cc725bb786a8100a6e54b54891 (patch) | |
| tree | 506950cecdedac5afac64266ed0fac198d642efb | |
| parent | 2e0e45a516b93cc72771a5de8b87cd0a07a55f07 (diff) | |
mac(4): also list jails in the example enumeration of objects
The prison may also be considered part of the subject by way of its
ucred association, but I don't think this is significantly different
enough today than before recent work -- policies could have always
taken them into account, and some did (e.g., mac_bsdextended).
Reported by: olce
Reviewed by: olce, ziaee
Differential Revision: https://reviews.freebsd.org/D54748
| -rw-r--r-- | share/man/man4/mac.4 | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/share/man/man4/mac.4 b/share/man/man4/mac.4 index d7ae30a1bac4..bdb7de018d3d 100644 --- a/share/man/man4/mac.4 +++ b/share/man/man4/mac.4 @@ -28,7 +28,7 @@ .\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF .\" SUCH DAMAGE. .\" -.Dd January 15, 2026 +.Dd January 16, 2026 .Dt MAC 4 .Os .Sh NAME @@ -68,7 +68,7 @@ Currently, the following MAC policy modules are shipped with .El .Ss MAC Labels Each system subject (processes, sockets, etc.) and each system object -(file system objects, sockets, etc.) can carry with it a MAC label. +(file system objects, jails, sockets, etc.) can carry with it a MAC label. MAC labels contain data in an arbitrary format taken into consideration in making access control decisions for a given operation. |