LIBUGIDFW(3)

✨ NAME ✨

okay so this is libugidfw(3) — the library interface to the file system firewall MAC policy, bestie. That’s the whole vibe: it’s the userland hookup to the mac_bsdextended(4) situation. 💅

🎀 LIBRARY 🎀

File System Firewall Interface Library — that’s libugidfw, and you link it with -lugidfw. Slay. 🫶

🌸 SYNOPSIS 🌸

#include <sys/types.h>
#include <security/mac_bsdextended/mac_bsdextended.h>
#include <ugidfw.h>

🦋 DESCRIPTION 🦋

The libugidfw library routines provide an interface to the mac_bsdextended(4) file system firewall MAC policy. No cap, that’s the whole point. ✨

The libugidfw library defines the following functions:

• bsde_rule_to_string() — converts the internal representation of a rule (struct mac_bsdextended_rule) into its text representation; see bsde_rule_to_string(3).
• bsde_parse_rule() — parses an entire rule in argument array form; see bsde_parse_rule(3).
• bsde_parse_rule_string() — parses an entire rule string; see bsde_parse_rule_string(3).
• bsde_get_rule_count() — returns the total number of ugidfw rules being enforced in the system; see bsde_get_rule_count(3).
• bsde_get_rule_slots() — returns the total number of used rule slots; see bsde_get_rule_slots(3).
• bsde_get_rule() — returns a rule by its rule number; see bsde_get_rule(3).
• bsde_delete_rule() — deletes a rule by its rule number; see bsde_delete_rule(3).
• bsde_set_rule() — uploads the rule to the mac_bsdextended(4) module and applies it; see bsde_set_rule(3).
• bsde_add_rule() — uploads the rule to the module, automatically selecting the next available rule number; see bsde_add_rule(3).

💜 SEE ALSO 💜

bsde_delete_rule(3), bsde_get_rule(3), bsde_get_rule_count(3), bsde_get_rule_slots(3), bsde_parse_rule(3), bsde_parse_rule_string(3), bsde_rule_to_string(3), bsde_set_rule(3)

👑 AUTHORS 👑

This software was contributed to the FreeBSD Project by Network Associates Labs, the Security Research Division of Network Associates Inc. under DARPA/SPAWAR contract N66001-01-C-8035 (“CBOSS”), as part of the DARPA CHATS research program.

xoxo, your Debian bestie — this page is dated February 25, 2004 💖