mac_test — MAC framework testing policy

       This  software  was  contributed to the FreeBSD Project by Network Associates Labs, the Security Research
       Division of Network Associates Inc.  under DARPA/SPAWAR contract N66001-01-C-8035 (“CBOSS”), as  part  of
       the DARPA CHATS research program.

       While  the  MAC  Framework design is intended to support the containment of the root user, not all attack
       channels are currently protected by entry point checks.  As such, MAC Framework policies  should  not  be
       relied on, in isolation, to protect against a malicious privileged user.

Debian                                            July 25, 2015                                      MAC_TEST(4)

       The  mac_test  policy  module  implements  a testing facility for the MAC framework.  Among other things,
       mac_test will try to catch corrupt labels the system is attempting to destroy and drop to  the  debugger.
       Additionally,  a  set of statistics regarding the number of times various MAC framework entry points have
       been called is stored in the security.mac.testsysctl(8) tree.

   LabelFormat
       No labels are defined for mac_test.

       The mac_test policy module first appeared in FreeBSD 5.0 and was developed by the TrustedBSD Project.

       mac_test — MAC framework testing policy

mac(4),   mac_biba(4),   mac_bsdextended(4),   mac_ifoff(4),   mac_lomac(4),   mac_mls(4),   mac_none(4),
       mac_partition(4), mac_portacl(4), mac_seeotheruids(4), mac(9)

       To  compile  the  testing policy into your kernel, place the following lines in your kernel configuration
       file:

             optionsMACoptionsMAC_TEST

       Alternately, to load the  testing  module  at  boot  time,  place  the  following  line  in  your  kernel
       configuration file:

             optionsMAC

       and in loader.conf(5):

             mac_test_load="YES"