biba

Building a FreeBSD MAC Kernel – Part 3

The last command we ran with this was the

make installkernel KERNCONF=MAC

More Biba

Here is a little more information regarding the biba integrity model, wikipeda has a basic explanation about it. http://en.wikipedia.org/wiki/Biba_Integrity_Model I prefer the CISSP cbk, It has a good write up of it and other models. If you can borrow that book or pickup your own it's worth...

Biba explained – Part 5

This is where things can get confusing, learning how labels and the levels work was pretty easy.  The compartments work differently, here is an example.

process1        biba/50:5+6+7
process2        biba/50:5+6
process3        biba/50

Biba explained – Part 4

In the last section we left off on compartments and labels.  I think we have explained what and how the label works with the files and processes in a system, compartments have a good chance at making your head hurt. Here is an example label with a compartment.

process    ...
			

Biba explained – Part 3

Now we can put some context around biba running on a FreeBSD system and some things you could do with it. There is 65,535 levels that can be assigned to a process or file, with 3 special levels. low - It is lower than any other process. equal - It is equal it any other process, it's almost...

Building a FreeBSD MAC Kernel – Part 2

Once the sync is completed go to /usr/src

cd /usr/src/

Building a FreeBSD MAC Kernel – Part 1

No not a Mac as in Apple, a MAC as in mandatory access control kernel with biba! To build your own MAC kernel or any FreeBSD kernel you will need to get the source tree, you can do this by using cvsup and a config file. Mine is called supfile, and it looks like this.

*default...