LIBUGIDFW(3)           FreeBSD Library Functions Manual           LIBUGIDFW(3)

NAME
     libugidfw - library interface to the file system firewall MAC policy

LIBRARY
     File System Firewall Interface Library (libugidfw, -lugidfw)

SYNOPSIS
     #include <sys/types.h>
     #include <security/mac_bsdextended/mac_bsdextended.h>
     #include <ugidfw.h>

DESCRIPTION
     The libugidfw library routines provide an interface to the
     mac_bsdextended(4) file system firewall MAC policy.

     The libugidfw library defines the following functions:

     bsde_rule_to_string()       Converts the internal representation of a
                                 rule (struct mac_bsdextended_rule) into its
                                 text representation; see
                                 bsde_rule_to_string(3).

     bsde_parse_rule()           Parses an entire rule (in argument array
                                 form); see bsde_parse_rule(3).

     bsde_parse_rule_string()    Parses an entire rule string; see
                                 bsde_parse_rule_string(3).

     bsde_get_rule_count()       Returns the total number of ugidfw rules
                                 being enforced in the system; see
                                 bsde_get_rule_count(3).

     bsde_get_rule_slots()       Returns the total number of used rule slots;
                                 see bsde_get_rule_slots(3).

     bsde_get_rule()             Returns a rule by its rule number; see
                                 bsde_get_rule(3).

     bsde_delete_rule()          Deletes a rule by its rule number; see
                                 bsde_delete_rule(3).

     bsde_set_rule()             Uploads the rule to the mac_bsdextended(4)
                                 module and applies it; see bsde_set_rule(3).

     bsde_add_rule()             Upload the rule to the module, automatically
                                 selecting the next available rule number; see
                                 bsde_add_rule(3).

SEE ALSO
     bsde_delete_rule(3), bsde_get_rule(3), bsde_get_rule_count(3),
     bsde_get_rule_slots(3), bsde_parse_rule(3), bsde_parse_rule_string(3),
     bsde_rule_to_string(3), bsde_set_rule(3)

AUTHORS
     This software was contributed to the FreeBSD Project by Network
     Associates Labs, the Security Research Division of Network Associates
     Inc.  under DARPA/SPAWAR contract N66001-01-C-8035 ("CBOSS"), as part of
     the DARPA CHATS research program.

FreeBSD 13.1-RELEASE-p6        February 25, 2004       FreeBSD 13.1-RELEASE-p6