FreeBSD biba

Building a FreeBSD MAC Kernel – Part 3

The last command we ran with this was the

make installkernel KERNCONF=MAC

Biba explained – Part 5

This is where things can get confusing, learning how labels and the levels work was pretty easy.  The compartments work differently, here is an example.

process1        biba/50:5+6+7
process2        biba/50:5+6
process3        biba/50

Biba explained – Part 4

In the last section we left off on compartments and labels.  I think we have explained what and how the label works with the files and processes in a system, compartments have a good chance at making your head hurt. Here is an example label with a compartment.

process    ...
			

Biba explained – Part 3

Now we can put some context around biba running on a FreeBSD system and some things you could do with it. There is 65,535 levels that can be assigned to a process or file, with 3 special levels. low - It is lower than any other process. equal - It is equal it any other process, it's almost...