head	1.2;
access;
symbols
	RELENG_7_4_0_RELEASE:1.1.12.1
	RELENG_7_4:1.1.0.12
	RELENG_7_4_BP:1.1
	RELENG_7_3_0_RELEASE:1.1.10.1
	RELENG_7_3:1.1.0.10
	RELENG_7_3_BP:1.1
	RELENG_7_2_0_RELEASE:1.1.8.1
	RELENG_7_2:1.1.0.8
	RELENG_7_2_BP:1.1
	RELENG_7_1_0_RELEASE:1.1.6.1
	RELENG_7_1:1.1.0.6
	RELENG_7_1_BP:1.1
	RELENG_7_0_0_RELEASE:1.1
	RELENG_7_0:1.1.0.4
	RELENG_7_0_BP:1.1
	RELENG_7:1.1.0.2
	RELENG_7_BP:1.1;
locks; strict;
comment	@# @;


1.2
date	2009.06.02.18.31.08;	author rwatson;	state dead;
branches;
next	1.1;

1.1
date	2005.09.18.03.15.35;	author csjp;	state Exp;
branches
	1.1.2.1
	1.1.6.1
	1.1.8.1
	1.1.10.1
	1.1.12.1;
next	;

1.1.2.1
date	2012.11.17.08.06.32;	author svnexp;	state Exp;
branches;
next	;

1.1.6.1
date	2008.11.25.02.59.29;	author kensmith;	state Exp;
branches;
next	;

1.1.8.1
date	2009.04.15.03.14.26;	author kensmith;	state Exp;
branches;
next	;

1.1.10.1
date	2010.02.10.00.26.20;	author kensmith;	state Exp;
branches;
next	;

1.1.12.1
date	2010.12.21.17.10.29;	author kensmith;	state Exp;
branches;
next	1.1.12.2;

1.1.12.2
date	2012.11.17.08.17.24;	author svnexp;	state Exp;
branches;
next	;


desc
@@


1.2
log
@SVN rev 193334 on 2009-06-02 18:31:08Z by rwatson

Remove MAC kernel config files and add "options MAC" to GENERIC, with the
goal of shipping 8.0 with MAC support in the default kernel.  No policies
will be compiled in or enabled by default, but it will now be possible to
load them at boot or runtime without a kernel recompile.

While the framework is not believed to impose measurable overhead when no
policies are loaded (a result of optimization over the past few months in
HEAD), we'll continue to benchmark and optimize as the release approaches.
Please keep an eye out for performance or functionality regressions that
could be a result of this change.

Approved by:	re (kensmith)
Obtained from:	TrustedBSD Project
@
text
@# MAC -- Generic kernel configuration file for FreeBSD/ia64 MAC
#
# The Mandatory Access Control, or MAC, framework allows administrators to
# finely control system security by providing for a loadable security pol-
# icy architecture.
#
# For more information see:
#
# http://www.FreeBSD.org/doc/en_US.ISO8859-1/books/handbook/mac.html 
#
# $FreeBSD: src/sys/ia64/conf/MAC,v 1.1 2005/09/18 03:15:35 csjp Exp $

include 	GENERIC
ident 		MAC

options 	MAC

#options 	MAC_BIBA		# BIBA data integrity policy
#options 	MAC_BSDEXTENDED		# File system firewall policy
#options 	MAC_IFOFF		# Network interface silencing policy
#options 	MAC_LOMAC		# Low-watermark data integrity policy
#options 	MAC_MLS			# Multi-level confidentiality policy
#options 	MAC_NONE		# NULL policy
#options 	MAC_PARTITION		# Process partition policy
#options 	MAC_PORTACL		# Network port access control policy
#options 	MAC_SEEOTHERUIDS	# UID visibility policy
#options 	MAC_STUB		# Stub policy
#options 	MAC_TEST		# Testing policy for the MAC framework
@


1.1
log
@Introduce a kernel config for the Mandatory Access Control framework.
This kernel config briefly describes some of the major MAC policies
available on FreeBSD. The hope is that this will raise the awareness
about MAC and get more people interested.

Discussed with:	scottl
@
text
@d11 1
a11 1
# $FreeBSD$
@


1.1.2.1
log
@Switch importer
@
text
@d11 1
a11 1
# $FreeBSD: stable/7/sys/ia64/conf/MAC 150270 2005-09-18 03:15:36Z csjp $
@


1.1.12.1
log
@SVN rev 216618 on 2010-12-21 17:10:29Z by kensmith

Copy stable/7 to releng/7.4 in preparation for FreeBSD-7.4 release.

Approved by:	re (implicit)
@
text
@@


1.1.12.2
log
@Switch importer
@
text
@d11 1
a11 1
# $FreeBSD: releng/7.4/sys/ia64/conf/MAC 150270 2005-09-18 03:15:36Z csjp $
@


1.1.10.1
log
@SVN rev 203736 on 2010-02-10 00:26:20Z by kensmith

Copy stable/7 to releng/7.3 as part of the 7.3-RELEASE process.

Approved by:	re (implicit)
@
text
@@


1.1.8.1
log
@SVN rev 191087 on 2009-04-15 03:14:26Z by kensmith

Create releng/7.2 from stable/7 in preparation for 7.2-RELEASE.

Approved by:	re (implicit)
@
text
@@


1.1.6.1
log
@SVN rev 185281 on 2008-11-25 02:59:29Z by kensmith

Create releng/7.1 in preparation for moving into RC phase of 7.1 release
cycle.

Approved by:	re (implicit)
@
text
@@

