Date: Thu, 28 May 2009 11:55:46 -0500 From: Jon Passki <jon.passki@hursk.com> To: freebsd-questions@freebsd.org Subject: MAC_PORTACL Not Allowing Non-Super User Access to Port Message-ID: <cc6847e40905280955k7ce63734na4509425ce06bcc7@mail.gmail.com>
next in thread | raw e-mail | index | archive | help
Hello, Full documentation here: http://blog.cykyc.org/2009/05/macportacl-and-no-love.html Gist of it is that I enabled MAC_PORTACL and MAC, rebuilt the kernel and installed it for testing.=A0 I was not able to get a non-super user to open up a privileged port, though. What am I doing wrong? [2136] ~> sysctl -a security.mac security.mac.max_slots: 4 security.mac.version: 3 security.mac.mmap_revocation_via_cow: 0 security.mac.mmap_revocation: 1 security.mac.portacl.rules: security.mac.portacl.port_high: 1023 security.mac.portacl.autoport_exempt: 1 security.mac.portacl.suser_exempt: 1 security.mac.portacl.enabled: 1 [2136] ~> id uid=3D1001(foo) gid=3D0(wheel) groups=3D0(wheel) [2136] ~> sudo sysctl security.mac.portacl.rules=3Duid:1001:tcp:80 Password: security.mac.portacl.rules: -> uid:1001:tcp:80 [2136] ~> nc -l 80 nc: Permission denied TIA, Jon
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?cc6847e40905280955k7ce63734na4509425ce06bcc7>