mactest(1)mactest(1)NAMEmactest - Tests MAC labels on directories, files and processes.
SYNOPSISmactest-P -D|d|e|x file
mactest-F -D|d|e|x file1 file2
mactest-L -D|d|e|x label file1
mactest-M [directory]
DESCRIPTION
The mactest command allows the current process and specified
files/directories to have their MAC label attributes compared for
dominance, equality and moldyness.
mactest evaluates the MAC labels using the given options and returns a
boolean result.
The options P, F, L and M determine the type of test:
-P Compare current running process and file.
-F Compare two files.
-L Compare MAC label and file.
-M Check if the process or directory is moldy.
The options D, d, e and x determine the type of comparison test:
D if [Process | file1 | maclabel] dominates file
d if [Process | file1 | maclabel] is dominated by file
e if [Process | file1 | maclabel] and file compare as equal
x if [Process | file1 | maclabel] and file are exactly equal
RETURN VALUEmactest returns 0(True) if the test is successful, 1(False) if the test
failed and -1 on error.
The -M (moldy) test option will only return 0(True) if the current
process is also moldy, as moldy directories are transparent to non-moldy
processes. See newlabel(1).
EXAMPLEmactest-P -D abc.txt
Will return 0(True) if the process MAC label dominates the MAC label
of the file abc.txt
mactest-Lx userlow abc.txt
Will return 0(True) if the label 'userlow' is exactly the same as
the MAC label of abc.txt
mactest-M tmp
Will return 0(True) if the directory 'tmp' has a moldy MAC label.
Page 1
mactest(1)mactest(1)mactest-M
Will return 0(True) if the process MAC label is moldy.
FILES
/etc/mac - MAC Label definitions.
SEE ALSOchlabel(1), newlabel(1), and test(1)
Page 2
