aboutsummaryrefslogtreecommitdiff
path: root/usr.sbin/ugidfw
Commit message (Collapse)AuthorAgeFilesLines
* Updated dependenciesSimon J. Gerraty2014-05-161-1/+0
| | | | Notes: svn path=/projects/bmake/; revision=266219
* Updated dependenciesSimon J. Gerraty2014-05-101-0/+2
| | | | Notes: svn path=/projects/bmake/; revision=265802
* Updated dependenciesSimon J. Gerraty2013-03-111-0/+1
| | | | Notes: svn path=/projects/bmake/; revision=248169
* Updated dependenciesSimon J. Gerraty2013-02-161-2/+0
| | | | Notes: svn path=/projects/bmake/; revision=246868
* Sync FreeBSD's bmake branch with Juniper's internal bmake branch.Marcel Moolenaar2012-08-221-0/+20
| | | | | | | Requested by: Simon Gerraty <sjg@juniper.net> Notes: svn path=/projects/bmake/; revision=239572
* Fix a couple of typos.Ulrich Spörlein2010-07-301-4/+3
| | | | | | | | | PR: docs/148891 Submitted by: olgeni MFC after: 1 week Notes: svn path=/head/; revision=210641
* In ugidfw(8), print the rule number and rule contents (as parsed and thenRobert Watson2008-12-241-2/+5
| | | | | | | | | | | | regenerated in libugidfw) rather than simply printing that the rule was added with only the number. This makes ugidfw(8) behave a bit more like ipfw(8), and also means that the administrator sees how the rule was interpreted once uids/gids/etc were processed. Obtained from: TrustedBSD Project Notes: svn path=/head/; revision=186480
* Add some new options to mac_bsdestended. We can now match on:David Malone2006-04-232-44/+196
| | | | | | | | | | | | | | | | | | | | | | | | | | subject: ranges of uid, ranges of gid, jail id objects: ranges of uid, ranges of gid, filesystem, object is suid, object is sgid, object matches subject uid/gid object type We can also negate individual conditions. The ruleset language is a superset of the previous language, so old rules should continue to work. These changes require a change to the API between libugidfw and the mac_bsdextended module. Add a version number, so we can tell if we're running mismatched versions. Update man pages to reflect changes, add extra test cases to test_ugidfw.c and add a shell script that checks that the the module seems to do what we expect. Suggestions from: rwatson, trhodes Reviewed by: trhodes MFC after: 2 months Notes: svn path=/head/; revision=157986
* Fixing an off-by-one error which results in 'ugidfw list' to complain aboutTai-hwa Liang2005-07-211-1/+1
| | | | | | | | | | "Data error in security.mac.bsdextended.rules.N: Unknown error: 0." Reviewed by: rwatson MFC after: 3 days Notes: svn path=/head/; revision=148240
* Add prototypes and remove unused variables for WARNS=6 compliance. AddPhilippe Charnier2005-01-161-25/+28
| | | | | | | | 'usage: ' in front of usage string. Use warnx(3) instead of fprintf in error messages to get progname prepended. Notes: svn path=/head/; revision=140343
* Wording nit.Tom Rhodes2005-01-101-1/+1
| | | | Notes: svn path=/head/; revision=139951
* Remove unnecessary include of vnode.h.Robert Watson2004-10-211-1/+0
| | | | | | | Requested by: phk Notes: svn path=/head/; revision=136741
* Mechanically kill hard sentence breaks.Ruslan Ermilov2004-07-021-2/+2
| | | | Notes: svn path=/head/; revision=131500
* Add an 'add' command to ugidfw(8), which permits specifying a newRobert Watson2004-02-252-10/+65
| | | | | | | | | | | | rule without explicitly specifying a new rule number. Update copyrights, remove license clause three. Obtained from: TrustedBSD Project Sponsored by: DARPA, McAfee Research Notes: svn path=/head/; revision=126218
* style.Makefile(5)David E. O'Brien2003-04-041-0/+1
| | | | Notes: svn path=/head/; revision=113091
* mdoc(7) police: markup overhaul.Ruslan Ermilov2002-12-121-33/+37
| | | | | | | Approved by: re Notes: svn path=/head/; revision=107778
* Stick .Os between .Dd and .DtChris Costello2002-10-201-0/+1
| | | | Notes: svn path=/head/; revision=105547
* Cosmetic line-wrapping change that has the side-effect of not producingChris Costello2002-10-181-2/+2
| | | | | | | the (incorrectly-spaced) output "... Network Associates Inc. under ..." Notes: svn path=/head/; revision=105381
* Remove a superfluous line containing only `.'Chris Costello2002-10-181-1/+0
| | | | Notes: svn path=/head/; revision=105380
* Activate ugidfw.8 man page.Chris Costello2002-10-171-1/+1
| | | | | | | | Obtained from: TrustedBSD Project Sponsored by: DARPA, NAI Labs Notes: svn path=/head/; revision=105361
* Add a man page for ugidfw(8).Chris Costello2002-10-171-0/+176
| | | | | | | | Obtained from: TrustedBSD Project Sponsored by: DARPA, NAI Labs Notes: svn path=/head/; revision=105303
* Add a libnames entry for libugidfw.Robert Watson2002-08-021-0/+1
| | | | | | | | | Add a DPADD line for ${LIBUGIDFW} for ugidfw. Submitted by: ru Notes: svn path=/head/; revision=101224
* Introduce support for Mandatory Access Control and extensibleRobert Watson2002-08-022-0/+190
kernel access control. Provide ugidfw, a utility to manage the ruleset provided by mac_bsdextended. Similar to ipfw, only for uids/gids and files. Obtained from: TrustedBSD Project Sponsored by: DARPA, NAI Labs Notes: svn path=/head/; revision=101209