Skip site navigation (1)Skip section navigation (2)

FreeBSD Manual Pages

  
 
  

home | help
SETFMAC(8)		  BSD System Manager's Manual		    SETFMAC(8)

NAME
     setfmac, setfsmac -- set MAC label	for a file system object

SYNOPSIS
     setfmac [-hR] label file ...
     setfsmac [-ehvx] [-f specfile] [-s	specfile] file ...

DESCRIPTION
     The setfmac utility assigns the specified MAC label to the	specified
     files.  The following options are available:

     -R	     Set the labels on the file	hierarchies rooted in the files	in-
	     stead of just the files themselves.

     -h	     If	the file is a symbolic link, change the	label of the link
	     rather than the file that the link	points to.

     The setfsmac utility accepts a list of specification files	as input and
     sets the MAC labels on the	specified file system hierarchies.  Path names
     specified will be visited in order	as given on the	command	line, and each
     tree will be traversed in pre-order.  (Generally, it will not be very
     useful to use relative, instead of	absolute, paths.)  The labels that
     match a file will be combined and set in a	single transaction.

     The following options are available:

     -e	     Treat any file systems encountered	which do not support MAC la-
	     belling as	errors,	instead	of warning and skipping	past them.

     -f	specfile
	     Add the specifications in specfile	as a set of which at most one
	     will be applied to	each file traversed per	-f specfile given.

     -h	     If	the file is a symbolic link, change the	label of the link
	     rather than the file that the link	points to.

     -s	specfile
	     Add the specification in specfile,	but assume that	the specifica-
	     tion format is that used in the port of SELinux to	FreeBSD,
	     SEBSD.  At	most one of the	specifications will be applied to each
	     file traversed per	-f specfile given.  The	prefix "sebsd/"	will
	     automatically be prepended	to the labels in this file, and	labels
	     matching "<<none>>" will be explicitly not	relabeled.  This per-
	     mits SEBSD	to re-use existing SELinux policy specification	files
	     unmodified.

     -v	     Increase the degree of verbosity.	When given, information	de-
	     tailing the labelling operation is	printed	while in progress.

     -x	     Do	not cross recurse into new file	systems	when traversing	them.

SEE ALSO
     mac(3), mac_set_file(3), mac_set_link(3), re_format(7), getfmac(8),
     mac(9)

BSD				 June 27, 2002				   BSD

NAME | SYNOPSIS | DESCRIPTION | SEE ALSO

Want to link to this manual page? Use this URL:
<https://man.freebsd.org/cgi/man.cgi?query=setfmac&sektion=8&manpath=FreeBSD+5.0-RELEASE>

home | help