The branch main has been updated by kevans: URL: https://cgit.FreeBSD.org/src/commit/?id=bef0475b6810b9cc725bb786a8100a6e54b54891
commit bef0475b6810b9cc725bb786a8100a6e54b54891 Author: Kyle Evans <[email protected]> AuthorDate: 2026-01-20 02:57:42 +0000 Commit: Kyle Evans <[email protected]> CommitDate: 2026-01-20 02:57:42 +0000 mac(4): also list jails in the example enumeration of objects The prison may also be considered part of the subject by way of its ucred association, but I don't think this is significantly different enough today than before recent work -- policies could have always taken them into account, and some did (e.g., mac_bsdextended). Reported by: olce Reviewed by: olce, ziaee Differential Revision: https://reviews.freebsd.org/D54748 --- share/man/man4/mac.4 | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/share/man/man4/mac.4 b/share/man/man4/mac.4 index d7ae30a1bac4..bdb7de018d3d 100644 --- a/share/man/man4/mac.4 +++ b/share/man/man4/mac.4 @@ -28,7 +28,7 @@ .\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF .\" SUCH DAMAGE. .\" -.Dd January 15, 2026 +.Dd January 16, 2026 .Dt MAC 4 .Os .Sh NAME @@ -68,7 +68,7 @@ Currently, the following MAC policy modules are shipped with .El .Ss MAC Labels Each system subject (processes, sockets, etc.) and each system object -(file system objects, sockets, etc.) can carry with it a MAC label. +(file system objects, jails, sockets, etc.) can carry with it a MAC label. MAC labels contain data in an arbitrary format taken into consideration in making access control decisions for a given operation.
