Date: Mon, 16 Sep 2002 10:20:31 -0700 (PDT) From: Robert Watson <rwatson@FreeBSD.org> To: Perforce Change Reviews <perforce@freebsd.org> Subject: PERFORCE change 17579 for review Message-ID: <200209161720.g8GHKVl1090852@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
http://people.freebsd.org/~peter/p4db/chv.cgi?CH=17579 Change 17579 by rwatson@rwatson_tislabs on 2002/09/16 10:20:02 Don't provide default labels at login in login.conf in preparation for merge of macnewapi to the main MAC tree. Otherwise, if you don't have all policies loaded, you might get locked out. Default labels for users must be configured by the administrator when they choose to load a policy. Affected files ... .. //depot/projects/trustedbsd/mac/etc/login.conf#14 edit Differences ... ==== //depot/projects/trustedbsd/mac/etc/login.conf#14 (text+ko) ==== @@ -37,9 +37,9 @@ :vmemoryuse=unlimited:\ :priority=0:\ :ignoretime@:\ - :umask=022:\ - :label=biba/high(low-high),mls/low(low-high),te/default_d:\ - :ttylabel=biba/high,mls/low,te/device_t: + :umask=022: + #:label=biba/high(low-high),mls/low(low-high),te/default_d:\ + #:ttylabel=biba/high,mls/low,te/device_t: # @@ -66,10 +66,10 @@ # N.B. login_getpwclass(3) will use this entry for the root account, # in preference to 'default'. root:\ - :label=biba/high(low-high),mls/low(low-high),te/default_d:\ - :ttylabel=biba/high,mls/low,te/device_t:\ :ignorenologin:\ :tc=default: + #:label=biba/high(low-high),mls/low(low-high),te/default_d:\ + #:ttylabel=biba/high,mls/low,te/device_t:\ # # Russian Users Accounts. Setup proper environment variables. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe p4-projects" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200209161720.g8GHKVl1090852>