etc/rc.d/ugidfw

   1 #!/bin/sh
   2 #
   3 # $FreeBSD$
   4
   5 # PROVIDE: ugidfw
   6 # REQUIRE:
   7 # BEFORE: LOGIN
   8 # KEYWORD: nojail
   9
  10 . /etc/rc.subr
  11
  12 name="ugidfw"
  13 rcvar="ugidfw_enable"
  14 start_cmd="ugidfw_start"
  15 start_precmd="ugidfw_precmd"
  16 stop_cmd="ugidfw_stop"
  17
  18 ugidfw_load()
  19 {
  20         if [ -r "${bsdextended_script}" ]; then
  21                 . "${bsdextended_script}"
  22         fi
  23 }
  24
  25 ugidfw_precmd()
  26 {
  27         if ! sysctl security.mac.bsdextended
  28           then kldload mac_bsdextended
  29             if [ "$?" -ne "0" ]
  30               then warn Unable to load the mac_bsdextended module.
  31               return 1
  32         else
  33           return 0
  34           fi
  35         fi
  36         return 0
  37 }
  38
  39 ugidfw_start()
  40 {
  41         [ -z "${bsdextended_script}" ] && bsdextended_script=/etc/rc.bsdextended
  42
  43         if [ -r "${bsdextended_script}" ]; then
  44                 ugidfw_load
  45                 echo "MAC bsdextended rules loaded."
  46         fi
  47 }
  48
  49 ugidfw_stop()
  50 {
  51         # Disable the policy
  52         #
  53         kldunload mac_bsdextended
  54 }
  55
  56 load_rc_config $name
  57 run_rc_command "$1"