aboutsummaryrefslogtreecommitdiff
path: root/lib/libugidfw
Commit message (Collapse)AuthorAgeFilesLines
* Bump library versions in preparation for 7.0.Daniel Eischen2007-05-211-1/+1
| | | | | | | Ok'd by: kan Notes: svn path=/head/; revision=169807
* Add some new options to mac_bsdestended. We can now match on:David Malone2006-04-233-180/+729
| | | | | | | | | | | | | | | | | | | | | | | | | | subject: ranges of uid, ranges of gid, jail id objects: ranges of uid, ranges of gid, filesystem, object is suid, object is sgid, object matches subject uid/gid object type We can also negate individual conditions. The ruleset language is a superset of the previous language, so old rules should continue to work. These changes require a change to the API between libugidfw and the mac_bsdextended module. Add a version number, so we can tell if we're running mismatched versions. Update man pages to reflect changes, add extra test cases to test_ugidfw.c and add a shell script that checks that the the module seems to do what we expect. Suggestions from: rwatson, trhodes Reviewed by: trhodes MFC after: 2 months Notes: svn path=/head/; revision=157986
* Bump the shared library version number of all libraries that have notKen Smith2005-07-221-1/+1
| | | | | | | | | | been bumped since RELENG_5. Reviewed by: ru Approved by: re (not needed for commit check but in principle...) Notes: svn path=/head/; revision=148297
* Fix two typos in comments.Tom Rhodes2005-04-231-2/+2
| | | | Notes: svn path=/head/; revision=145432
* When parsing the second {uid,gid} in an identity phrase for ugidfw,Robert Watson2005-04-161-13/+25
| | | | | | | | | | | check the password or group database before attempting to parse as an integer, as is done for the first {uid,gid} in an identity phrase. Obtained from: TrustedBSD Project Sponsored by: SPAWAR, SPARTA Notes: svn path=/head/; revision=145140
* In practice, you need to include <sys/types.h> andRobert Watson2005-04-161-0/+2
| | | | | | | | | | <security/mac_bsdextended/mac_bsdextended.h> in order to include <ugidfw.h>, so document that. MFC after: 3 days Notes: svn path=/head/; revision=145139
* Fix typo - link for bsde_add_rule(3) manual page was not created.Pawel Jakub Dawidek2005-03-281-1/+1
| | | | | | | MFC after: 1 week Notes: svn path=/head/; revision=144212
* Properly return rule number.Pawel Jakub Dawidek2005-03-281-1/+1
| | | | | | | | | Submitted by: Wojciech A. Koszek PR: bin/79292 MFC after: 1 week Notes: svn path=/head/; revision=144210
* Modify libugidfw(3) to use MBI_* permission flags from mac_bsdextended.hRobert Watson2004-10-211-13/+12
| | | | | | | | | | instead of using the V* permission flags from vnode.h. Remove include of vnode.h. Requested by: phk Notes: svn path=/head/; revision=136740
* Mechanically kill hard sentence breaks.Ruslan Ermilov2004-07-025-5/+10
| | | | Notes: svn path=/head/; revision=131504
* Markup, grammar, punctuation.Ruslan Ermilov2004-07-012-2/+4
| | | | Notes: svn path=/head/; revision=131421
* Fixed misspellings of 0 as NULL.Bruce Evans2004-03-111-3/+2
| | | | Notes: svn path=/head/; revision=126835
* Add bsde_add_rule(), which is similar to bsde_set_rule() except thatRobert Watson2004-02-255-4/+79
| | | | | | | | | | | the caller does not specify the rule number -- instead, the kernel module is probed for the next available rule, which is then used. Obtained from: TrustedBSD Project Sponsored by: DARPA, McAfee Research Notes: svn path=/head/; revision=126217
* Assorted mdoc(7) fixes.Ruslan Ermilov2003-06-015-74/+91
| | | | Notes: svn path=/head/; revision=115633
* Correct a couple small typos.Chris Costello2003-01-071-2/+2
| | | | | | | Submitted by: Attila Nagy <bra@fsn.hu> Notes: svn path=/head/; revision=108878
* Document the file system firewall interface library functions.Chris Costello2003-01-076-0/+515
| | | | | | | Sponsored by: DARPA, Network Associates Laboratories Notes: svn path=/head/; revision=108873
* License and blurb update authorized by Network Associates.Robert Watson2002-11-072-14/+8
| | | | Notes: svn path=/head/; revision=106573
* Zap now-unused SHLIB_MINORPeter Wemm2002-09-281-1/+0
| | | | Notes: svn path=/head/; revision=104073
* Use size_t instead of int for len variables passed in/out of sysctl.Robert Watson2002-09-272-3/+4
| | | | | | | Pointed out by: jake Notes: svn path=/head/; revision=104038
* Use "ugidfw.h" rather than <ugidfw.h> so that mkdep can find it.Robert Watson2002-08-141-1/+1
| | | | | | | Suggested by: mike Notes: svn path=/head/; revision=101885
* De-gccize CFLAGS by removing it.Robert Watson2002-08-021-2/+0
| | | | | | | | | NOMAN is no longer required when a man page is not yet present. Submitted by: ru Notes: svn path=/head/; revision=101222
* Introduce support for Mandatory Access Control and extensibleRobert Watson2002-08-023-0/+785
kernel access control. Provide a library to manage user file system firewall-like rules supported by the mac_bsdextended.ko security model. The kernel module exports the current rule set using sysctl, and this library provides a front end that includes support for retrieving and setting rules, as well as printing and parsing them. Note: as with other userland components, this is a WIP. However, when used in combination with the soon-to-be-committed ugidfw, it can actually be quite useful in multi-user environments to allow the administrator to limit inter-user file operations without resorting to heavier weight labeled security policies. Obtained form: TrustedBSD Project Sponsored by: DARPA, NAI Labs Notes: svn path=/head/; revision=101206
generated by cgit v1.2.3 (git 2.25.1) at 2024-05-01 05:00:25 +0000