Poll for users: mac_partition and mac_ifoff policies


Dear all,

I'm currently in the process of reviewing the use of the MAC Framework in FreeBSD, following meetings at the developer summit about proposed simplifications and enhancements. One of the on-going concerns I have had is that several of the policies we ship are reference implementation policies, rather than reference user policies:

mac_ifoff - Interface silencing
mac_partition - Process space partitions
mac_stub - Stub MAC policy entry points
mac_test - Invariants testing

While mac_stub and mac_test are both extremely useful for devleopers as shipped, it's not clear to me that mac_ifoff and mac_partition offer significantly similar value, and as they are reference policies rather than production policies, my leaning is to provide them as downloads on the TrustedBSD web site and via p4, but to not ship them with FreeBSD 7.0. So this e-mail is to poll to see if anyone is currently using the mac_ifoff and mac_partition policies in production, and would object on those grounds to shipping them separately from the base OS.

Robert N M Watson
Computer Laboratory
University of Cambridge
_______________________________________________
freebsd-security@xxxxxxxxxxx mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscribe@xxxxxxxxxxx"

Relevant Pages

  • Re: space travel or war
    ... policies that they thought were in the long term best interests of the ... See the reference above... ... World oil production is 83 million barrels per day. ... Iraqi oil production is less than 2 million barrels per day. ...
    (sci.space.policy)
  • RE: How to design Security Policies
    ... There are many sites that have such policies, ... with classification & labeling suitable for your business sector. ... A good reference book to have for outlining roles and responsibilities ... We are in process of designing the security policies for entire ...
    (Security-Basics)
  • Re: list of group policys
    ... Perhaps the best reference from MS on the security ... policies is found in the W2k3 Security and Hardening Guides. ... > Group Policy Settings Reference for Windows Server 2003: ...
    (microsoft.public.windows.group_policy)
  • Re: Is it normal?
    ... way the reference is set and used by others. ... reference via a getter and then addresses its collaboration message to ... Generally the rules and policies for instantiating relationships (i.e., ... Pathfinder Solutions -- Put MDA to Work ...
    (comp.object)