Skip site navigation (1)Skip section navigation (2)

FreeBSD Manual Pages


home | help
SETFSMAC(8)		FreeBSD	System Manager's Manual		   SETFSMAC(8)

     setfsmac -- set MAC label for a file hierarchy

     setfsmac [-ehqvx] [-f specfile] ... [-s specfile] ... file	...

     The setfsmac utility accepts a list of specification files	as input and
     sets the MAC labels on the	specified file system hierarchies.  Path names
     specified will be visited in order	as given on the	command	line, and each
     tree will be traversed in pre-order.  (Generally, it will not be very
     useful to use relative paths instead of absolute paths.)  Multiple	en-
     tries matching a single file will be combined and applied in a single

     The following options are available:

     -e	     Treat any file systems encountered	which do not support MAC la-
	     belling as	errors,	instead	of warning and skipping	them.

     -f	specfile
	     Apply the specifications in specfile to the specified paths.
	     NOTE: Only	the first entry	for each file is applied; all others
	     are disregarded and silently dropped.  Multiple -f	arguments may
	     be	specified to include multiple specification files.

     -h	     When a symbolic link is encountered, change the label of the link
	     rather than the file the link points to.

     -q	     Do	not print non-fatal warnings during execution.

     -s	specfile
	     Apply the specifications in specfile, but assume the specifica-
	     tion format is compatible with the	SELinux	specfile format.
	     NOTE: Only	the first entry	for each file is applied; all others
	     are disregarded and silently dropped.  The	prefix "sebsd/"	will
	     be	automatically prepended	to the labels in specfile.  Labels
	     matching "<<none>>" will be explicitly not	relabeled.  This per-
	     mits SEBSD	to reuse existing SELinux policy specification files.

     -v	     Increase the degree of verbosity.

     -x	     Do	not recurse into new file systems when traversing them.

     /usr/share/security/lomac-policy.contexts	Sample specfile	containing LO-
						MAC policy entries.

     See FILES.

     mac(3), mac_set_file(3), mac_set_link(3), mac(4), re_format(7),
     getfmac(8), setfmac(8), mac(9)

     This software was contributed to the FreeBSD Project by Network Asso-
     ciates Labs, the Security Research	Division of Network Associates Inc.
     under DARPA/SPAWAR	contract N66001-01-C-8035 ("CBOSS"), as	part of	the
     DARPA CHATS research program.

FreeBSD	13.0		       February	17, 2004		  FreeBSD 13.0


Want to link to this manual page? Use this URL:

home | help