Home Developers Documentation Source code ACLs Audit BSMtrace ExtAttr + UFS2 GEOM + GBDE
Mailing Lists News Legal MAC Framework OpenBSM OpenPAM Privileges SEBSD SEDarwin

TrustedBSD File System Access Extended Attributes and UFS2

Extended attributes allow the kernel and userland processes to tag files with arbitrary named data. This provides a location to store the extensive security data required for the various TrustedBSD security extensions, including ACLs, privileges and MAC labels.

Extended attribute support has been developed for FreeBSD's UFS1 file system and integrated with the FreeBSD development tree, and was included in FreeBSD 5.0. UFS2 was implemented to provide improved performance and reliability for extended attributes, and has been available since FreeBSD 5.0. UFS2 became the default in FreeBSD 5.1, and is the recommended file system for TrustedBSD functionality.

UFS1 extended attributes were implemented by Robert Watson. UFS2 was implemented by Kirk McKusick and Poul-Henning Kamp.

    Copyright 2000-2012 Robert N. M. Watson. All rights reserved.
    Copyright 2005 SPARTA, Inc. All rights reserved.
    Copyright 2002, Leigh T. Denault. All rights reserved.
    Copyright 2002, 2003 Networks Associates, Inc. All rights reserved.