From owner-freebsd-hackers@FreeBSD.ORG  Mon Aug 22 07:00:38 2005
Return-Path: <owner-freebsd-hackers@FreeBSD.ORG>
X-Original-To: freebsd-hackers@freebsd.org
Delivered-To: freebsd-hackers@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 67F1816A422
	for <freebsd-hackers@freebsd.org>; Mon, 22 Aug 2005 07:00:38 +0000 (GMT)
	(envelope-from misha@onet.ru)
Received: from mail.onet.ru (mail.onet.ru [213.85.10.5])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 6482D43D45
	for <freebsd-hackers@freebsd.org>; Mon, 22 Aug 2005 07:00:37 +0000 (GMT)
	(envelope-from misha@onet.ru)
Received: from mail.onet.ru (localhost [127.0.0.1])
	by mail.onet.ru (Postfix) with ESMTP id A1FC245259
	for <freebsd-hackers@freebsd.org>; Mon, 22 Aug 2005 11:00:34 +0400 (MSD)
Received: by mail.onet.ru (Postfix, from userid 1003)
	id 7FF9045258; Mon, 22 Aug 2005 11:00:34 +0400 (MSD)
Received: from [213.85.50.90] (pppoe-50-90.onet.ru [213.85.50.90])
	by mail.onet.ru (Postfix) with ESMTP id 6F1334524A
	for <freebsd-hackers@freebsd.org>; Mon, 22 Aug 2005 11:00:30 +0400 (MSD)
Message-ID: <4309780D.1070607@onet.ru>
Date: Mon, 22 Aug 2005 11:00:29 +0400
From: Michael <misha@onet.ru>
User-Agent: Mozilla Thunderbird 1.0.6 (Windows/20050716)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: freebsd-hackers@freebsd.org
References: <43087A39.7000106@onet.ru>
	<20050821163830.D44147@fledge.watson.org>
In-Reply-To: <20050821163830.D44147@fledge.watson.org>
X-Enigmail-Version: 0.92.0.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
X-Spam-Checker-Version: SpamAssassin 3.0.4 (2005-06-05) on mail.onet.ru
X-Spam-Level: 
X-Spam-Status: No, score=-3.3 required=2.0 tests=AWL,BAYES_00 autolearn=ham 
	version=3.0.4
X-AV-Checked: ClamAV using ClamSMT
Subject: Re: MAC Biba policy. High marked process can't write to high marked
 file.
X-BeenThere: freebsd-hackers@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Technical Discussions relating to FreeBSD
	<freebsd-hackers.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-hackers>, 
	<mailto:freebsd-hackers-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-hackers>
List-Post: <mailto:freebsd-hackers@freebsd.org>
List-Help: <mailto:freebsd-hackers-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-hackers>,
	<mailto:freebsd-hackers-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 22 Aug 2005 07:00:38 -0000

Robert Watson wrote:

>> test: Permission denied.
>
> %setpmac biba/high echo 1 >> test       # bah!
>
> Remember that the '>>' is evaluated in the parent shell context, not
> the execution context set up by setpmac.  Try doing "setpmac biba/high
> csh" and see how that changes the results when you run the complete
> command in that context?

Yeah, seem it was just my misinterpretation of handbook, I really
appreciate for help ;-)