Date: Mon, 16 Jun 2008 08:51:01 -0500 From: Jeffrey Goldberg <jeffrey@goldmark.org> To: Bill Moran <wmoran@potentialtech.com> Cc: FreeBSD List <freebsd-questions@freebsd.org> Subject: Re: Enforce minimal file/ dir permissions Message-ID: <AFE68B39-2732-4338-B561-F24CB19A23B6@goldmark.org> In-Reply-To: <20080616082125.7dd23b70.wmoran@potentialtech.com> References: <1213611664.6398.275.camel@phoenix.blechhirn.net> <20080616082125.7dd23b70.wmoran@potentialtech.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Jun 16, 2008, at 7:21 AM, Bill Moran wrote: > Look at MAC and the bsdextended module (filesystem firewall): > http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/mac.html > http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/mac-bsdextended.html I've recently been looking at those myself, and while I think that I have developed some limited understanding "in principle" about how MAC works, I need a great deal more practical guidance. Is there some extended tutorial with cookbook or other resource that will actually help someone who doesn't fully grok this work out a policy and rules that will do more good than harm? Yes, I've used google, but haven't yet come across what I need. Cheers, -j -- Jeffrey Goldberg http://www.goldmark.org/jeff/
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?AFE68B39-2732-4338-B561-F24CB19A23B6>