1*b633f84bSwiz.\" $NetBSD: posix1e.3,v 1.4 2020/06/28 21:37:05 wiz Exp $ 29aa2a9c3Schristos.\"- 39aa2a9c3Schristos.\" Copyright (c) 2000, 2009 Robert N. M. Watson 49aa2a9c3Schristos.\" All rights reserved. 59aa2a9c3Schristos.\" 69aa2a9c3Schristos.\" Redistribution and use in source and binary forms, with or without 79aa2a9c3Schristos.\" modification, are permitted provided that the following conditions 89aa2a9c3Schristos.\" are met: 99aa2a9c3Schristos.\" 1. Redistributions of source code must retain the above copyright 109aa2a9c3Schristos.\" notice, this list of conditions and the following disclaimer. 119aa2a9c3Schristos.\" 2. Redistributions in binary form must reproduce the above copyright 129aa2a9c3Schristos.\" notice, this list of conditions and the following disclaimer in the 139aa2a9c3Schristos.\" documentation and/or other materials provided with the distribution. 149aa2a9c3Schristos.\" 159aa2a9c3Schristos.\" THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND 169aa2a9c3Schristos.\" ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 179aa2a9c3Schristos.\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 189aa2a9c3Schristos.\" ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE 199aa2a9c3Schristos.\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 209aa2a9c3Schristos.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 219aa2a9c3Schristos.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 229aa2a9c3Schristos.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 239aa2a9c3Schristos.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 249aa2a9c3Schristos.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 259aa2a9c3Schristos.\" SUCH DAMAGE. 269aa2a9c3Schristos.\" 279aa2a9c3Schristos.\" $FreeBSD: head/lib/libc/posix1e/posix1e.3 318704 2017-05-23 07:05:34Z ngie $ 289aa2a9c3Schristos.\" 299aa2a9c3Schristos.Dd February 25, 2016 309aa2a9c3Schristos.Dt POSIX1E 3 319aa2a9c3Schristos.Os 329aa2a9c3Schristos.Sh NAME 339aa2a9c3Schristos.Nm posix1e 349aa2a9c3Schristos.Nd introduction to the POSIX.1e security API 359aa2a9c3Schristos.Sh LIBRARY 369aa2a9c3Schristos.Lb libc 379aa2a9c3Schristos.Sh SYNOPSIS 389aa2a9c3Schristos.In sys/types.h 399aa2a9c3Schristos.In sys/acl.h 403d58360bSchristos.\" .In sys/mac.h 419aa2a9c3Schristos.Sh DESCRIPTION 429aa2a9c3SchristosPOSIX.1e describes five security extensions to the POSIX.1 API: Access 439aa2a9c3SchristosControl Lists (ACLs), Auditing, Capabilities, Mandatory Access Control, and 449aa2a9c3SchristosInformation Flow Labels. 459aa2a9c3SchristosWhile IEEE POSIX.1e D17 specification has not been standardized, several of 469aa2a9c3Schristosits interfaces are widely used. 479aa2a9c3Schristos.Pp 483d58360bSchristos.Nx 499aa2a9c3Schristosimplements POSIX.1e interface for access control lists, described in 509aa2a9c3Schristos.Xr acl 3 , 519aa2a9c3Schristosand supports ACLs on the 529aa2a9c3Schristos.Xr ffs 7 539aa2a9c3Schristosfile system; ACLs must be administratively enabled using 543d58360bSchristos.Xr tunefs 8 553d58360bSchristosor via 563d58360bSchristos.Xr mount 8 573d58360bSchristosoptions. 589aa2a9c3Schristos.Pp 593d58360bSchristos.Nx 603d58360bSchristosdoes not implement the POSIX.1e mac, audit, privilege (capability), 613d58360bSchristosor information flow label APIs. 629aa2a9c3Schristos.Sh ENVIRONMENT 639aa2a9c3SchristosPOSIX.1e assigns security attributes to all objects, extending the security 649aa2a9c3Schristosfunctionality described in POSIX.1. 659aa2a9c3SchristosThese additional attributes store fine-grained discretionary access control 663d58360bSchristosinformation; for files, they are stored 679aa2a9c3Schristosin extended attributes, described in 689aa2a9c3Schristos.Xr extattr 3 . 699aa2a9c3Schristos.Pp 709aa2a9c3SchristosPOSIX.2c describes 719aa2a9c3Schristosa set of userland utilities for manipulating these attributes, including 729aa2a9c3Schristos.Xr getfacl 1 739aa2a9c3Schristosand 743d58360bSchristos.Xr setfacl 1 . 759aa2a9c3Schristos.Sh SEE ALSO 769aa2a9c3Schristos.Xr getfacl 1 , 779aa2a9c3Schristos.Xr setfacl 1 , 789aa2a9c3Schristos.Xr acl 3 , 799aa2a9c3Schristos.Xr extattr 3 , 809aa2a9c3Schristos.Xr ffs 7 , 819aa2a9c3Schristos.Xr tunefs 8 , 829aa2a9c3Schristos.Xr acl 9 , 833d58360bSchristos.Xr extattr 9 849aa2a9c3Schristos.Sh STANDARDS 859aa2a9c3SchristosPOSIX.1e is described in IEEE POSIX.1e draft 17. 869aa2a9c3Schristos.Sh HISTORY 879aa2a9c3SchristosPOSIX.1e support was introduced in 883d58360bSchristos.Nx 10.0 . 899aa2a9c3Schristos.Sh AUTHORS 909aa2a9c3Schristos.An Robert N M Watson 919aa2a9c3Schristos.An Chris D. Faulhaber 929aa2a9c3Schristos.An Thomas Moestl 939aa2a9c3Schristos.An Ilmar S Habibulin 94