man.bsd.lv manual page server

DESCRIPTION

MAC labels consist of a set of (name, value) tuples, representing security attributes from MAC policies. For example, this label contains security labels defined by two policies, mac_biba(4) and mac_mls(4):

biba/low,mls/low

Further syntax and semantics of MAC labels may be found in maclabel(7).

Applications operate on labels stored in mac_t, but can convert between this internal format and a text format for the purposes of presentation to uses or external storage. When querying a label on an object, a mac_t must first be prepared using the interfaces described in mac_prepare(3), allowing the application to declare which policies it wishes to interrogate. The application writer can also rely on default label names declared in mac.conf(5).

When finished with a mac_t, the application must call mac_free(3) to release its storage.

The following functions are defined:

mac_is_present()

This function, described in mac_is_present(3), allows applications to test whether MAC is configured, as well as whether specific policies are configured.

mac_get_fd(), mac_get_file(), mac_get_link(), mac_get_peer()

These functions, described in mac_get(3), retrieve the MAC labels associated with file descriptors, files, and socket peers.

mac_get_pid(), mac_get_proc()

These functions, described in mac_get(3), retrieve the MAC labels associated with processes.

mac_set_fd(), mac_set_file(), mac_set_link()

These functions, described in mac_set(3), set the MAC labels associated with file descriptors and files.

mac_set_proc()

This function, described in mac_set(3), sets the MAC label associated with the current process.

mac_free()

This function, described in mac_free(3), frees working MAC label storage.

mac_from_text()

This function, described in mac_text(3), converts a text-form MAC label into working MAC label storage, mac_t.

mac_prepare(), mac_prepare_file_label(), mac_prepare_ifnet_label(), mac_prepare_process_label(), mac_prepare_type()

These functions, described in mac_prepare(3), allocate working storage for MAC label operations. mac_prepare(3) prepares a label based on caller-specified label names; the other calls rely on the default configuration specified in mac.conf(5).

mac_to_text()

This function is described in mac_text(3), and may be used to convert a mac_t into a text-form MAC label.