freebsd-src/usr.bin
Baptiste Daroussin 8aac90f18a mac_do: add a new MAC/do policy and mdo(1) utility
This policy enables a user to become another user without having to be
root (hence no setuid binary). it is configured via rules using sysctl
security.mac.do.rules

For example:
security.mac.do.rules=uid=1001:80,gid=0:any

The above rule means the user identifier by the uid 1001 is able to
become user 80
Any user of the group 0 are allowed to become any user on the system.

The mdo(1) utility expects the MAC/do policy to be installed and its
rules defined.

Reviewed by:	des
Differential Revision:	https://reviews.freebsd.org/D45145
2024-05-22 14:01:41 +02:00
..
addr2line
alias
apply
ar ar(1): Fix grammar error in write.c 2024-02-13 15:31:59 +08:00
asa asa: Rewrite to fix line termination issue. 2024-01-09 17:27:15 +01:00
at
awk awk: Fix the tests 2024-03-07 22:52:56 -07:00
backlight
banner
basename
bc
beep
biff
bintrans bintrans: Remove unused variable. 2024-02-01 14:10:45 +01:00
bluetooth
bmake Merge bmake-20240508 2024-05-13 22:19:20 -07:00
brandelf
bsdcat
bsddialog
bsdiff bsdiff: Use mmap instead of malloc 2024-04-19 16:33:07 -06:00
bzip2
bzip2recover
c89
c99
caesar
calendar usr.bin/calendar/calendars: Add myself as a committer 2024-03-24 19:57:27 +01:00
cap_mkdb
chat
chkey
chpass
cksum cksum(1): Add EXAMPLES to manual page 2024-01-18 14:04:25 +01:00
clang Merge llvm-project release/18.x llvmorg-18.1.0-rc2-53-gc7b0a6ecd442 2024-04-06 22:14:13 +02:00
cmp
col
colrm
column
comm
compile_et
compress
cpio
csplit
ctags ctags: Use C99 bool instead of defining our own 2024-04-19 14:48:37 -04:00
ctlstat
cut cut: use getline() instead of fgetln() 2024-04-19 15:52:21 -06:00
cxxfilt
dc
diff diff: Nits in tests. 2024-05-20 16:27:50 +02:00
diff3
dirname
dpv
drill
dtc
du Add libxo support to du 2024-04-29 08:22:39 -06:00
ee
elfctl
elfdump
enigma
env
etdump
expand expand: Fix markup for the -t option. 2024-05-13 12:41:38 +02:00
factor
false
fetch
file
file2c
find find: Add -readable, -writable & -executable options 2024-01-21 17:33:46 -08:00
finger
fmt
fold
fortune freebsd-tips: Tweak fortune to find font providing Unicode character 2024-05-15 11:34:39 -03:00
from
fstat inpcb: fully retire inp_ppcb pointer 2024-03-29 12:18:32 -07:00
fsync
ftp
gcore
gencat
genl
getaddrinfo
getconf
getent
getopt
gh-bc
gprof
grdc Revert "grdc: Add copyright" 2024-05-10 14:12:19 -06:00
grep
gzip
head head: use getline() instead of fgetln() 2024-04-19 15:52:22 -06:00
hesinfo
hexdump hexdump: Do not trust st_size if it equals zero. 2024-01-04 00:16:50 -08:00
host
iconv
id
ident
indent indent: make the URL of the manpage two characters longer so that the test is successful 2023-12-29 09:37:43 +00:00
ipcrm
ipcs
iscsictl
join join: use getline() instead of fgetln() 2024-04-19 15:52:22 -06:00
jot
kdump ktrace: Record detailed ECAPMODE violations 2024-04-07 18:52:51 -05:00
keylogin
keylogout
killall
ktrace ktrace: Remove CAPFAIL from default trace points 2024-04-23 19:26:14 -05:00
ktrdump
kyua
lam
last
lastcomm
ldd
ldd32
leave
less
lessecho
lesskey
lex
limits
locale
localedef
locate Remove remnants of portsnap(8) 2024-04-30 22:44:34 +09:00
lock
lockf
logger
login login: Missed an instance of getpwnam(). 2024-01-12 17:40:55 +01:00
logins
logname
look
lorder lorder: Tweak invalid file test. 2024-02-29 14:59:25 +01:00
lsvfs man filesystems: fix xrefs after move to section 4 2024-05-16 10:25:29 -06:00
lzmainfo
m4
mail mail: add volatile in grabh() 2024-01-04 21:40:53 -05:00
man man: the exists function needs to validate the first parameter 2024-05-20 16:02:21 +00:00
mandoc
mdo mac_do: add a new MAC/do policy and mdo(1) utility 2024-05-22 14:01:41 +02:00
mesg
ministat
mkcsmapper
mkcsmapper_static
mkdep
mkesdb
mkesdb_static
mkfifo
mkimg mkimg(1): process non-seekable output gracefully 2024-03-12 23:00:21 +07:00
mkstr
mktemp
mkuzip
morse
msgs msgs: Use C99 bool instead of defining our own 2024-02-06 08:37:50 -05:00
mt
nc
ncal
ncurses
netstat netstat(8): for -W, use IFNAMSIZ 2024-05-16 11:07:34 -06:00
newgrp
newkey
nfsstat nfsstat: make -q work without -e/-E 2023-12-28 13:27:07 -07:00
nice
nl
nm
nohup
number
objcopy
ofed
pagesize
pamtest
passwd
paste
patch patch: use getline() instead of fgetln() 2024-04-19 15:52:22 -06:00
pathchk
perror
pom
posixmqcontrol man filesystems: fix xrefs after move to section 4 2024-05-16 10:25:29 -06:00
posixshmcontrol
pr
primes
printenv
printf
proccontrol
procstat
protect
quota
random
rctl
readelf
renice
resizewin
rev
revoke
rpcgen
rpcinfo
rs
rup
ruptime
rusers
rwall
rwho
script script: handle terminal resize on SIGWINCH 2024-04-26 11:39:00 -05:00
sdiff sdiff: Fix binary case. 2024-02-18 18:39:50 +01:00
sdiotool
sed
seq
shar
showmount
size
smbutil
sockstat
soelim
sort
split Tighten boundary check in split(1) to prevent a potential buffer overflow. 2024-05-03 01:29:20 -07:00
ssh-copy-id
stat stat(1): Fix grammar error in stat.c 2024-02-13 15:33:16 +08:00
stdbuf
strings
su
systat inpcb: fully retire inp_ppcb pointer 2024-03-29 12:18:32 -07:00
tabs
tail tail: Do not trust st_size if it equals zero. 2024-01-04 01:00:23 -08:00
talk
tar
tcopy
tee
telnet
tests
tftp
time time: siginfo_recvd needs to be marked volatile 2024-05-22 00:37:41 -05:00
tip
top top: Avoid printing a blank line when the ZFS ARC is empty 2024-01-11 10:01:37 -05:00
touch touch: Add unit tests. 2024-03-27 11:03:45 +01:00
tr
true
truncate
truss Translate linux_newlstat name argument 2024-03-21 00:45:55 +02:00
tsort
tty
ul
uname
unexpand
unifdef
uniq uniq: Error out if writing to the output failed. 2024-01-12 16:44:06 +01:00
units usr.bin/units: use else..if to avoid calling the next branch 2024-04-19 16:54:30 -06:00
unvis
unzip libarchive: merge from vendor branch 2024-04-16 23:39:31 +02:00
usbhidaction
usbhidctl
users
vacation
vgrind
vi
vis
vmstat
vtfontcvt
w
wall
wc wc: Fix SIGINFO race with casper init. 2024-02-18 10:57:42 -08:00
wg
what
whereis
which which: Use size_t instead of ssize_t for pathlen 2024-04-05 14:30:31 -04:00
who
whois
write
xargs xargs: use getline() instead of fgetln() 2024-04-19 15:52:22 -06:00
xinstall install: Fix a compiler warning when bootstrapping 2024-04-19 14:48:37 -04:00
xo
xohtml
xolint
xopo
xstr
xz Remove WITHOUT_CAPSICUM build support 2024-04-23 08:26:28 -04:00
xzdec
yacc
yes
ypcat
ypmatch
ypwhich
zstd
Makefile mac_do: add a new MAC/do policy and mdo(1) utility 2024-05-22 14:01:41 +02:00
Makefile.amd64
Makefile.arm
Makefile.i386
Makefile.inc
Makefile.powerpc