sysutils/mac_nonet g20150821.1405500 FreeBSD

MAC policy to disable access to networking for certain group

System: FreeBSD
Repository: FreeBSD ports
Maintainer: [email protected]
License: BSD2CLAUSE
Categories: sysutils, kld
Package size: 4.4 KiB, 11.4 KiB installed

Description

Simple MAC framework policy to disable access to networking for certain group. Running kldload mac_nonet.ko to load the kernel module. The load action require root permissions.

Set gid that shouldn't access the network: sysctl security.mac.nonet.gid=31337 and enable enforcing: sysctl security.mac.nonet.enabled=1

Any call to socket(2) from user in this group will end with EPERM. You can also select group that can access only AF_UNIX sockets with security.mac.nonet.local_gid.

Install

Binary package:

pkg install mac_nonet-kmod

From the ports tree:

cd /usr/ports/sysutils/mac_nonet/ && make install clean

To depend on this port in another port's Makefile:

RUN_DEPENDS=	mac_nonet-kmod>0:sysutils/mac_nonet

Packages

The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.

Repository

aarch64

amd64

armv6

armv7

i386

FreeBSD:14:latest

g20150821.1404000

g20150821

g20150821.1402000

g20150821.1404000

FreeBSD:14:quarterly

g20150821.1404000

n/a

g20150821.1402000

g20150821.1404000

FreeBSD:15:latest

g20150821.1501000

n/a

g20150821.1500063

FreeBSD:15:quarterly

g20150821.1501000

n/a

FreeBSD:16:latest

g20150821.1600026

g20150821.1600028

n/a

FreeBSD:16:quarterly

n/a

Dependencies

The Makefile names none itself; they come from USES and USE_*.

The full lists below include those, and their dependencies in turn.

No port depends on this one.

Configuration

No options to configure.

USES: kmod uidfix
Service scripts: none

Message after installing

===>   NOTICE:

The mac_nonet-kmod port currently does not have a maintainer. As a result, it is
more likely to have unresolved issues, not be up-to-date, or even be removed in
the future. To volunteer to maintain this port, please create an issue at:

https://bugs.freebsd.org/bugzilla

More information about port maintainership is available at:

https://docs.freebsd.org/en/articles/contributing/#ports-contributing

Files

distinfo 1

File

Size

SHA256

pbiernacki-mac_nonet-g20150821-f7e008a_GH0.tar.gz

1862

996281aa2e26528cbc4c265101e5f3996958cc816cb3434d412c5b6f51df6604

Commit history 0

No commits in the history this site was built from.