aboutsummaryrefslogtreecommitdiff
path: root/share/man/man4/mac_ifoff.4
diff options
context:
space:
mode:
authorRuslan Ermilov <ru@FreeBSD.org>2003-06-01 21:52:59 +0000
committerRuslan Ermilov <ru@FreeBSD.org>2003-06-01 21:52:59 +0000
commit3cc3bf528231cd53cd0ffbb44b0e90f74d8ca82c (patch)
tree804ec6702bc40a970eef42ead0aafae09cfd1473 /share/man/man4/mac_ifoff.4
parentd7ea49283cfc7a996dce555d9b7673d7d150f0f1 (diff)
downloadsrc-3cc3bf528231cd53cd0ffbb44b0e90f74d8ca82c.tar.gz
src-3cc3bf528231cd53cd0ffbb44b0e90f74d8ca82c.zip
Assorted mdoc(7) fixes.
Notes
Notes: svn path=/head/; revision=115643
Diffstat (limited to 'share/man/man4/mac_ifoff.4')
-rw-r--r--share/man/man4/mac_ifoff.441
1 files changed, 22 insertions, 19 deletions
diff --git a/share/man/man4/mac_ifoff.4 b/share/man/man4/mac_ifoff.4
index a6c02e98b587..331ea79f1746 100644
--- a/share/man/man4/mac_ifoff.4
+++ b/share/man/man4/mac_ifoff.4
@@ -29,26 +29,33 @@
.\" SUCH DAMAGE.
.\"
.\" $FreeBSD$
-.Dd DECEMBER 10, 2002
+.\"
+.Dd December 10, 2002
.Os
.Dt MAC_IFOFF 4
.Sh NAME
.Nm mac_ifoff
-.Nd interface silencing policy
+.Nd "interface silencing policy"
.Sh SYNOPSIS
To compile the interface silencing policy into your kernel,
place the following lines in your kernel
configuration file:
+.Bd -ragged -offset indent
.Cd "options MAC"
.Cd "options MAC_IFOFF"
+.Ed
.Pp
Alternately, to load the interface silencing policy module at boot time,
place the following line in your kernel configuration file:
+.Bd -ragged -offset indent
.Cd "options MAC"
+.Ed
.Pp
and in
.Xr loader.conf 5 :
-.Cd mac_ifoff_load= Ns \&"YES"
+.Bd -literal -offset indent
+mac_ifoff_load="YES"
+.Ed
.Sh DESCRIPTION
The
.Nm
@@ -59,25 +66,19 @@ via the
interface.
.Pp
To disable network traffic over the loopback
-.Xr ( lo 4 )
+.Pq Xr lo 4
interface, set the
.Xr sysctl 8
OID
.Va security.mac.ifoff.lo_enabled
-to
-.Li 0
-(default
-.Li 1 ) .
+to 0 (default 1).
.Pp
To enable network traffic over other interfaces,
set the
.Xr sysctl 8
OID
.Va security.mac.ifoff.other_enabled
-to
-.Li 1
-(default
-.Li 0 ) .
+to 1 (default 0).
.Pp
To allow BPF traffic to be received,
even while other traffic is disabled,
@@ -85,10 +86,7 @@ set the
.Xr sysctl 8
OID
.Va security.mac.ifoff.bpfrecv_enabled
-to
-.Li 1
-(default
-.Li 0 ) .
+to 1 (default 0).
.Ss Label Format
No labels are defined.
.Sh SEE ALSO
@@ -108,19 +106,24 @@ The
.Nm
policy module first appeared in
.Fx 5.0
-and was developed by the TrustedBSD Project.
+and was developed by the
+.Tn TrustedBSD
+Project.
.Sh AUTHORS
This software was contributed to the
.Fx
Project by Network Associates Labs,
the Security Research Division of Network Associates
-Inc. under DARPA/SPAWAR contract N66001-01-C-8035 ("CBOSS"),
+Inc. under DARPA/SPAWAR contract N66001-01-C-8035
+.Pq Dq CBOSS ,
as part of the DARPA CHATS research program.
.Sh BUGS
See
.Xr mac 9
concerning appropriateness for production use.
-The TrustedBSD MAC Framework is considered experimental in
+The
+.Tn TrustedBSD
+MAC Framework is considered experimental in
.Fx .
.Pp
While the MAC Framework design is intended to support the containment of