mac_nonet MAC policy to disable access to networking for certain group

g20150821 sysutils =0 g20150821Version of this port present on the latest quarterly branch.

IGNORE: requires kernel source files in /usr/src

There is no maintainer for this port.

Any concerns regarding this port should be directed to the FreeBSD Ports mailing list via ports@FreeBSD.org

Port Added: 2018-03-12 07:06:00

Last Update: 2018-12-05 20:01:11

SVN Revision: 486720

Also Listed In: kld

License: BSD2CLAUSE

Description:

Simple MAC framework policy to disable access to networking for certain group. Running kldload mac_nonet.ko to load the kernel module. The load action require root permissions. Set gid that shouldn't access the network: sysctl security.mac.nonet.gid=31337 and enable enforcing: sysctl security.mac.nonet.enabled=1 Any call to socket(2) from user in this group will end with EPERM. You can also select group that can access only AF_UNIX sockets with security.mac.nonet.local_gid. WWW: https://github.com/pbiernacki/mac_nonet

SVNWeb : Homepage

pkg-plist: as obtained via: make generate-plist

Expand this list (5 items)

1. /boot/modules/mac_nonet.ko
2. @kld /boot/modules
3. /usr/local/share/licenses/mac_nonet-kmod-g20150821/catalog.mk
4. /usr/local/share/licenses/mac_nonet-kmod-g20150821/LICENSE
5. /usr/local/share/licenses/mac_nonet-kmod-g20150821/BSD2CLAUSE

Collapse this list.

Dependency lines:

• mac_nonet-kmod>0:sysutils/mac_nonet

To install the port: cd /usr/ports/sysutils/mac_nonet/ && make install clean

A package is not available for ports marked as: Forbidden / Broken / Ignore / Restricted

PKGNAME: mac_nonet-kmod

Flavors: there is no flavor information for this port.

distinfo:

TIMESTAMP = 1495107566 SHA256 (pbiernacki-mac_nonet-g20150821-f7e008a_GH0.tar.gz) = 996281aa2e26528cbc4c265101e5f3996958cc816cb3434d412c5b6f51df6604 SIZE (pbiernacki-mac_nonet-g20150821-f7e008a_GH0.tar.gz) = 1862

There are no ports dependent upon this port

Configuration Options

No options to configure

USES:

kmod uidfix

Master Sites:

1. https://codeload.github.com/pbiernacki/mac_nonet/tar.gz/f7e008a?dummy=/

These ports now build on powerpc64.

While here, pet portlint.

Approved by:	portmgr (tier-2 blanket)

Correction to r473019: Revert the unintended change to the 'Created by' headers.

Reset MAINTAINER on ports maintained by amutu@amutu.com

Based on the new policy of all maintained ports reset
when maintaner is absent for 3 months.

Bug#226400 for science/py-tensorflow is ignored since 2018-03-06 (3+ months).
portscout database indicates that 48.94% of his ports aren't updated.

Mark as broken on powerpc64.

Approved by:	portmgr (tier-2 blanket)

New port: sysutils/mac_nonet

Simple MAC framework policy to disable access to networking for
certain group.  Running kldload mac_nonet.ko to load the kernel
module.  The load action require root permissions.

Set gid that shouldn't access the network:
    sysctl security.mac.nonet.gid=31337
and enable enforcing:
     sysctl security.mac.nonet.enabled=1

Any call to socket(2) from user in this group will end with EPERM.
You can also select group that can access only AF_UNIX sockets with
security.mac.nonet.local_gid.

WWW: https://github.com/pbiernacki/mac_nonet

PR:		219376
Submitted by:	amutu@amutu.com
Reviewed by:	bapt

4 vulnerabilities affecting 12 ports have been reported in the past 14 days

^* - modified, not new

All vulnerabilities

Last updated:
2019-10-19 10:52:46