MandatoryAccessControl [FreeBSD WIKI]

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.
===== Mandatory Access Control =====

===== Introduction =====

The Mandatory Access Control (MAC) framework provides an intuitive API to managing access control to kernel objects.

===== How It Works =====

Through the use of MAC entry points through-out the system, composition of kernel discretionary access control decisions may be modified and/or monitored through MAC modules.

The MAC framework also facilitates communication between MAC modules and the rest of the system (including user-space) through MAC labels (covering file descriptors to individual mbuf's) and other entry points (such as mac_syscall, a multiplexed system call of sorts).

===== Documentation =====

  * [[https://docs.freebsd.org/en/books/handbook/mac/|Mandatory Access Control (FreeBSD Handbook: Chapter 16)]]
  * [[https://docs.freebsd.org/en/books/arch-handbook/mac/|The TrustedBSD Mandatory Access Control Framework (FreeBSD Architecture Handbook)]]
  * [[https://man.freebsd.org/mac(4)|FreeBSD mac(4) Manual Page: Mandatory Access Control]]

===== Tutorials =====

Mandatory Access Control Extended Tutorial (networksynapse.net)

  * [[https://networksynapse.net/freebsd/mandatory-access-control-mac-part-1-bsd-extended-tutorial/|Part 1: The MAC Framework]]
  * [[https://networksynapse.net/freebsd/trustedbsd-mac-processes/|Part 2: MAC Processes]]
  * [[https://networksynapse.net/freebsd/trustedbsd-mandatory-access-control-part-3-policy-mac-biba/|Part 3: MAC BIBA Policy]]

===== More Information =====

  * [[TrustedBSD]]
  * [[http://www.trustedbsd.org/mac.html|TrustedBSD: MAC Project Page]]

----

{{tag>Security}}