mac_nonet MAC policy to disable access to networking for certain group
g20150821 sysutils =0

IGNORE: requires kernel source files in /usr/src

There is no maintainer for this port.
Any concerns regarding this port should be directed to the FreeBSD Ports mailing list via ports@FreeBSD.org
Port Added: 12 Mar 2018 07:06:00
Also Listed In: kld
License: BSD2CLAUSE

Simple MAC framework policy to disable access to networking for
certain group.  Running kldload mac_nonet.ko to load the kernel
module.  The load action require root permissions.

Set gid that shouldn't access the network: 
    sysctl security.mac.nonet.gid=31337
and enable enforcing:
     sysctl security.mac.nonet.enabled=1
     
Any call to socket(2) from user in this group will end with EPERM.
You can also select group that can access only AF_UNIX sockets with
security.mac.nonet.local_gid.

WWW: https://github.com/pbiernacki/mac_nonet

SVNWeb : Homepage : PortsMon

Pseudo-pkg-plist information, but much better, from make generate-plist
Expand this list (5 items)

1. /boot/modules/mac_nonet.ko
2. @kld /boot/modules
3. /usr/local/share/licenses/mac_nonet-kmod-g20150821/catalog.mk
4. /usr/local/share/licenses/mac_nonet-kmod-g20150821/LICENSE
5. /usr/local/share/licenses/mac_nonet-kmod-g20150821/BSD2CLAUSE
Collapse this list.

---

To install the port: cd /usr/ports/sysutils/mac_nonet/ && make install clean

A package is not available for ports marked as: Forbidden / Broken / Ignore / Restricted

PKGNAME: mac_nonet-kmod

distinfo:

TIMESTAMP = 1495107566
SHA256 (pbiernacki-mac_nonet-g20150821-f7e008a_GH0.tar.gz) = 996281aa2e26528cbc4c265101e5f3996958cc816cb3434d412c5b6f51df6604
SIZE (pbiernacki-mac_nonet-g20150821-f7e008a_GH0.tar.gz) = 1862

There are no ports dependent upon this port

---

Configuration Options

     No options to configure

---

USES:

kmod uidfix

---

Master Sites:

1. https://codeload.github.com/pbiernacki/mac_nonet/tar.gz/f7e008a?dummy=/

These ports now build on powerpc64.

While here, pet portlint.

Approved by:	portmgr (tier-2 blanket)

Correction to r473019: Revert the unintended change to the 'Created by' headers.

Reset MAINTAINER on ports maintained by amutu@amutu.com

Based on the new policy of all maintained ports reset
when maintaner is absent for 3 months.

Bug#226400 for science/py-tensorflow is ignored since 2018-03-06 (3+ months).
portscout database indicates that 48.94% of his ports aren't updated.

Mark as broken on powerpc64.

Approved by:	portmgr (tier-2 blanket)

New port: sysutils/mac_nonet

Simple MAC framework policy to disable access to networking for
certain group.  Running kldload mac_nonet.ko to load the kernel
module.  The load action require root permissions.

Set gid that shouldn't access the network:
    sysctl security.mac.nonet.gid=31337
and enable enforcing:
     sysctl security.mac.nonet.enabled=1

Any call to socket(2) from user in this group will end with EPERM.
You can also select group that can access only AF_UNIX sockets with
security.mac.nonet.local_gid.

WWW: https://github.com/pbiernacki/mac_nonet

PR:		219376
Submitted by:	amutu@amutu.com
Reviewed by:	bapt

11 vulnerabilities affecting 80 ports have been reported in the past 14 days

^* - modified, not new

All vulnerabilities

Last updated:
2018-12-10 05:56:16