Page MenuHomeFreeBSD
Differential D27364

mac_grantbylabel focused priv escallation via maclabel
Needs ReviewPublic
Actions

Authored by sjg on Nov 24 2020, 10:46 PM.

Details

Reviewers
stevek
emaste
Summary

This module leverages labels set via mac_veriexec
to provide priv escallation to specific applictaions.

Diff Detail

Repository
rS FreeBSD src repository - subversion
Lint
Lint SkippedExcuse: not working
Unit
No Unit Test Coverage
Build Status
Buildable 35021
Build 32006: arc lint + arc unit

Revision Contents
Changeset List

PathSize
etc/
mtree/
2 lines
include/
4 lines
lib/
libveriexec/
7 lines
162 lines
89 lines
13 lines
sys/
conf/
2 lines
kern/
11 lines
modules/
mac_grantbylabel/
36 lines
11 lines
security/
mac/
1 line
3 lines
15 lines
mac_grantbylabel/
66 lines
404 lines
mac_veriexec/
2 lines
5 lines
26 lines
sys/
9 lines

Diff 79965

View Options

etc/mtree/BSD.include.dist

Loading...
View Options

include/Makefile

Loading...
View Options

lib/libveriexec/Makefile

Loading...
View Options

lib/libveriexec/exec_script.c

Loading...
View Options

lib/libveriexec/gbl_check.c

Loading...
View Options

lib/libveriexec/libveriexec.h

Loading...
View Options

sys/conf/files

Loading...
View Options

sys/kern/kern_exec.c

Loading...
View Options

sys/modules/mac_grantbylabel/Makefile

Loading...
View Options

sys/modules/mac_grantbylabel/Makefile.depend

Loading...
View Options

sys/security/mac/mac_framework.h

Loading...
View Options

sys/security/mac/mac_policy.h

Loading...
View Options

sys/security/mac/mac_process.c

Loading...
View Options

sys/security/mac_grantbylabel/mac_grantbylabel.h

Loading...
View Options

sys/security/mac_grantbylabel/mac_grantbylabel.c

Loading...
View Options

sys/security/mac_veriexec/mac_veriexec.h

Loading...
View Options

sys/security/mac_veriexec/mac_veriexec.c

Loading...
View Options

sys/security/mac_veriexec/veriexec_metadata.c

Loading...
View Options

sys/sys/priv.h

Loading...