1
0
mirror of https://git.FreeBSD.org/src.git synced 2024-12-12 09:58:36 +00:00
freebsd/usr.sbin
David Malone 89ddbd45e5 Add some new options to mac_bsdestended. We can now match on:
subject: ranges of uid, ranges of gid, jail id
	objects: ranges of uid, ranges of gid, filesystem,
		object is suid, object is sgid, object matches subject uid/gid
		object type

We can also negate individual conditions. The ruleset language is
a superset of the previous language, so old rules should continue
to work.

These changes require a change to the API between libugidfw and the
mac_bsdextended module. Add a version number, so we can tell if
we're running mismatched versions.

Update man pages to reflect changes, add extra test cases to
test_ugidfw.c and add a shell script that checks that the the
module seems to do what we expect.

Suggestions from: rwatson, trhodes
Reviewed by: trhodes
MFC after: 2 months
2006-04-23 17:06:18 +00:00
..
ac
accton
acpi
adduser
amd Folded WITH_HESIOD_SUPPORT into WITH_HESIOD. 2006-03-21 09:00:51 +00:00
ancontrol
apm
apmd
arlcontrol
arp
asf
atm
audit
auditd
auditreduce
authpf
bluetooth Properly map mouse buttons 2006-03-21 18:42:52 +00:00
boot0cfg
boot98cfg
bootparamd
bsnmpd Add missing library dependencies. 2006-04-13 12:49:24 +00:00
btxld
burncd
cdcontrol
chkgrp
chown
chroot
ckdist
config
cron
crunch
ctm
daemon
dconschat
devinfo
digictl
diskinfo
dnssec-keygen
dnssec-signzone
editmap
edquota
eeprom
elf2exe
extattr
extattrctl
faithd
fdcontrol
fdformat
fdread
fdwrite
flowctl
fwcontrol
getfmac
getpmac
gstat
i4b
ifmcstat
inetd Update a couple of comments relating to RFCs. 2006-04-17 19:55:25 +00:00
iostat o De-register local vars. 2006-04-16 22:30:24 +00:00
ip6addrctl
ipfwpcap
IPXrouted
jail o Do not mangle current session user login name with jail -u|-U. 2006-04-16 12:32:04 +00:00
jexec Add -u and -U which functions like the jail(8) that allow 2006-04-19 10:12:10 +00:00
jls
kbdcontrol
kbdmap
kernbb
keyserv
kgmon
kgzip
kldxref
lastlogin
lmcconfig
lpr
lptcontrol
mailstats
mailwrapper
makemap
manctl
memcontrol
mergemaster
mixer
mld6query
mlxcontrol
mount_nwfs
mount_portalfs
mount_smbfs
mountd
moused
mptable
mrouted
mtest
mtree
named
named-checkconf
named-checkzone
named.reload
ndiscvt
ndp
newsyslog
nfsd
ngctl
nghook
nologin
ntp
ofwdump
pccard
pciconf
pcvt
periodic
pkg_install Add INDEX-7 and remove trailing spaces. 2006-04-17 11:15:29 +00:00
pmccontrol
pmcstat When printing a map, print the number of samples recorded by each gmon.out file. 2006-04-05 15:12:25 +00:00
pnpinfo
portsnap
powerd
ppp
pppctl
pppd
pppstats
praliases
praudit
procctl
pstat
pw
pwd_mkdb
quot
quotaon
rarpd
raycontrol
repquota
rip6query
rmt
rndc
rndc-confgen
route6d
rpc.lockd
rpc.statd
rpc.umntall
rpc.yppasswdd
rpc.ypupdated
rpc.ypxfrd
rpcbind
rrenumd
rtadvd avoid heap overrun 2006-03-23 14:39:38 +00:00
rtprio
rtsold fixed a potential memory leak 2006-03-24 23:59:51 +00:00
rwhod
sa
sade Fix minimal installation check. 'X' was not displayed when it was selected. 2006-04-14 18:18:43 +00:00
sendmail
setfmac
setpmac
sicontrol
sliplogin
slstat
smbmsg
snapinfo Fix version number when the feature was added. 2006-03-23 07:55:33 +00:00
spkrtest
spray
sysinstall Fix copy-and-pasto in comment. 2006-04-14 18:34:57 +00:00
syslogd Add the ability to log to an arbitrary udp port as well as the 2006-04-17 20:12:35 +00:00
tcpdchk
tcpdmatch
tcpdrop
tcpdump
timed
traceroute
traceroute6
trpt
tzsetup
ugidfw Add some new options to mac_bsdestended. We can now match on: 2006-04-23 17:06:18 +00:00
usbdevs
vidcontrol
vipw
vnconfig
watch
watchdogd
wicontrol
wlandebug
wlconfig
wpa add debug msg 2006-04-20 05:03:21 +00:00
yp_mkdb
ypbind
yppoll
yppush
ypserv - Let make(1) track dependencies and regen netid map when needed. 2006-04-13 13:03:35 +00:00
ypset
zic
zzz
Makefile libc_r is no longer provided, and on alpha and sparc64, libthr 2006-04-12 19:52:34 +00:00
Makefile.inc