RE: libarchive and MAC labels

2013-06-20 Thread priit
be accessed that way, which is why the patch doesn't do that. It would however bypass some of the issues the current solution needs to deal with. Priit. ___ freebsd-security@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebs

libarchive and MAC labels

2013-06-10 Thread priit
by mac_to_text(). This could potentially cause some future breakage, if the text representation ever changes. Also, restoring a label partially (let's say a biba+MLS label with only biba enabled) does not work. Any thoughts on that? Thanks, Priit. _

setfsmac and LOMAC aux grades - inconsistent behaviour

2013-04-28 Thread priit
rstanding, the issue here is the ability to set the aux grade on the binary. Getting the IP configured was just the way I stumbled into this and can of course be handled in other ways. Also, it is probably obvious from the above script listing, but the files sit on / filesystem that has m