Units
Translation components API.
See the Weblate's Web API documentation for detailed description of the API.
GET /api/translations/documentation/booksarch-handbookmac_index/el/units/?format=api
{ "count": 898, "next": "https://translate-dev.freebsd.org/api/translations/documentation/booksarch-handbookmac_index/el/units/?format=api&page=2", "previous": null, "results": [ { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/booksarch-handbookmac_index/el/?format=api", "source": [ "The TrustedBSD MAC Framework" ], "previous_source": "", "target": [ "" ], "id_hash": 917743234708429472, "content_hash": 917743234708429472, "location": "documentation/content/en/books/arch-handbook/mac/_index.adoc:1, documentation/content/en/books/arch-handbook/mac/_index.adoc:18", "context": "", "note": "type: Title =", "flags": "no-wrap", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 1, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 4, "source_unit": "https://translate-dev.freebsd.org/api/units/1136852/?format=api", "priority": 100, "id": 1638866, "web_url": "https://translate-dev.freebsd.org/translate/documentation/booksarch-handbookmac_index/el/?checksum=8cbc7a9c0bd05aa0", "url": "https://translate-dev.freebsd.org/api/units/1638866/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-17T12:39:55.264736Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/booksarch-handbookmac_index/el/?format=api", "source": [ "Chapter 6. The TrustedBSD MAC Framework" ], "previous_source": "", "target": [ "" ], "id_hash": 439880694394448315, "content_hash": 439880694394448315, "location": "documentation/content/en/books/arch-handbook/mac/_index.adoc:1", "context": "", "note": "type: YAML Front Matter: title", "flags": "no-wrap", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 2, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 6, "source_unit": "https://translate-dev.freebsd.org/api/units/1136850/?format=api", "priority": 100, "id": 1638867, "web_url": "https://translate-dev.freebsd.org/translate/documentation/booksarch-handbookmac_index/el/?checksum=861ac52934eee9bb", "url": "https://translate-dev.freebsd.org/api/units/1638867/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-17T12:39:55.265591Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/booksarch-handbookmac_index/el/?format=api", "source": [ "MAC Documentation Copyright" ], "previous_source": "", "target": [ "" ], "id_hash": -5131291714590912745, "content_hash": -5131291714590912745, "location": "documentation/content/en/books/arch-handbook/mac/_index.adoc:56", "context": "", "note": "type: Title ==", "flags": "no-wrap", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 3, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 3, "source_unit": "https://translate-dev.freebsd.org/api/units/1136854/?format=api", "priority": 100, "id": 1638868, "web_url": "https://translate-dev.freebsd.org/translate/documentation/booksarch-handbookmac_index/el/?checksum=38c9fd5f50e74f17", "url": "https://translate-dev.freebsd.org/api/units/1638868/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-17T12:39:55.266279Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/booksarch-handbookmac_index/el/?format=api", "source": [ "This documentation was developed for the FreeBSD Project by Chris Costello at Safeport Network Services and Network Associates Laboratories, the Security Research Division of Network Associates, Inc. under DARPA/SPAWAR contract N66001-01-C-8035 (\"CBOSS\"), as part of the DARPA CHATS research program." ], "previous_source": "", "target": [ "" ], "id_hash": 2298193059499403466, "content_hash": 2298193059499403466, "location": "documentation/content/en/books/arch-handbook/mac/_index.adoc:59", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 4, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 40, "source_unit": "https://translate-dev.freebsd.org/api/units/1136856/?format=api", "priority": 100, "id": 1638869, "web_url": "https://translate-dev.freebsd.org/translate/documentation/booksarch-handbookmac_index/el/?checksum=9fe4d26948bae8ca", "url": "https://translate-dev.freebsd.org/api/units/1638869/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-17T12:39:55.266924Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/booksarch-handbookmac_index/el/?format=api", "source": [ "Redistribution and use in source (SGML DocBook) and 'compiled' forms (SGML, HTML, PDF, PostScript, RTF and so forth) with or without modification, are permitted provided that the following conditions are met:" ], "previous_source": "", "target": [ "" ], "id_hash": 2923912952896139645, "content_hash": 2923912952896139645, "location": "documentation/content/en/books/arch-handbook/mac/_index.adoc:61", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 5, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 31, "source_unit": "https://translate-dev.freebsd.org/api/units/1136858/?format=api", "priority": 100, "id": 1638870, "web_url": "https://translate-dev.freebsd.org/translate/documentation/booksarch-handbookmac_index/el/?checksum=a893d356cf89b17d", "url": "https://translate-dev.freebsd.org/api/units/1638870/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-17T12:39:55.267593Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/booksarch-handbookmac_index/el/?format=api", "source": [ "Redistributions of source code (SGML DocBook) must retain the above copyright notice, this list of conditions and the following disclaimer as the first lines of this file unmodified." ], "previous_source": "", "target": [ "" ], "id_hash": 441439968065801791, "content_hash": 441439968065801791, "location": "documentation/content/en/books/arch-handbook/mac/_index.adoc:63", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 6, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 28, "source_unit": "https://translate-dev.freebsd.org/api/units/1136860/?format=api", "priority": 100, "id": 1638871, "web_url": "https://translate-dev.freebsd.org/translate/documentation/booksarch-handbookmac_index/el/?checksum=86204f4fe638ce3f", "url": "https://translate-dev.freebsd.org/api/units/1638871/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-17T12:39:55.268225Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/booksarch-handbookmac_index/el/?format=api", "source": [ "Redistributions in compiled form (transformed to other DTDs, converted to PDF, PostScript, RTF and other formats) must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution." ], "previous_source": "", "target": [ "" ], "id_hash": 1164353846591966881, "content_hash": 1164353846591966881, "location": "documentation/content/en/books/arch-handbook/mac/_index.adoc:64", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 7, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 40, "source_unit": "https://translate-dev.freebsd.org/api/units/1136862/?format=api", "priority": 100, "id": 1638872, "web_url": "https://translate-dev.freebsd.org/translate/documentation/booksarch-handbookmac_index/el/?checksum=90289da78af94ea1", "url": "https://translate-dev.freebsd.org/api/units/1638872/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-17T12:39:55.316818Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/booksarch-handbookmac_index/el/?format=api", "source": [ "THIS DOCUMENTATION IS PROVIDED BY THE NETWORKS ASSOCIATES TECHNOLOGY, INC \"AS IS\" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL NETWORKS ASSOCIATES TECHNOLOGY, INC BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS DOCUMENTATION, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE." ], "previous_source": "", "target": [ "" ], "id_hash": 338065173350721091, "content_hash": 338065173350721091, "location": "documentation/content/en/books/arch-handbook/mac/_index.adoc:69", "context": "", "note": "type: delimited block = 4", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 8, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 115, "source_unit": "https://translate-dev.freebsd.org/api/units/1569833/?format=api", "priority": 100, "id": 1638873, "web_url": "https://translate-dev.freebsd.org/translate/documentation/booksarch-handbookmac_index/el/?checksum=84b10c7be8802643", "url": "https://translate-dev.freebsd.org/api/units/1638873/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-17T12:39:55.317803Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/booksarch-handbookmac_index/el/?format=api", "source": [ "Synopsis" ], "previous_source": "", "target": [ "Σύνοψη" ], "id_hash": -6651481047257516920, "content_hash": -6651481047257516920, "location": "documentation/content/en/books/arch-handbook/mac/_index.adoc:72", "context": "", "note": "type: Title ==", "flags": "no-wrap", "labels": [], "state": 20, "fuzzy": false, "translated": true, "approved": false, "position": 9, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 1, "source_unit": "https://translate-dev.freebsd.org/api/units/1136866/?format=api", "priority": 100, "id": 1638874, "web_url": "https://translate-dev.freebsd.org/translate/documentation/booksarch-handbookmac_index/el/?checksum=23b1313a83f8f488", "url": "https://translate-dev.freebsd.org/api/units/1638874/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-17T12:39:55.318739Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/booksarch-handbookmac_index/el/?format=api", "source": [ "FreeBSD includes experimental support for several mandatory access control policies, as well as a framework for kernel security extensibility, the TrustedBSD MAC Framework. The MAC Framework is a pluggable access control framework, permitting new security policies to be easily linked into the kernel, loaded at boot, or loaded dynamically at run-time. The framework provides a variety of features to make it easier to implement new security policies, including the ability to easily tag security labels (such as confidentiality information) onto system objects." ], "previous_source": "", "target": [ "" ], "id_hash": 6677438990856093973, "content_hash": 6677438990856093973, "location": "documentation/content/en/books/arch-handbook/mac/_index.adoc:77", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 10, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 82, "source_unit": "https://translate-dev.freebsd.org/api/units/1569835/?format=api", "priority": 100, "id": 1638875, "web_url": "https://translate-dev.freebsd.org/translate/documentation/booksarch-handbookmac_index/el/?checksum=dcab076233520115", "url": "https://translate-dev.freebsd.org/api/units/1638875/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-17T12:39:55.319569Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/booksarch-handbookmac_index/el/?format=api", "source": [ "This chapter introduces the MAC policy framework and provides documentation for a sample MAC policy module." ], "previous_source": "", "target": [ "" ], "id_hash": -7787515937985325126, "content_hash": -7787515937985325126, "location": "documentation/content/en/books/arch-handbook/mac/_index.adoc:79", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 11, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 16, "source_unit": "https://translate-dev.freebsd.org/api/units/1136870/?format=api", "priority": 100, "id": 1638876, "web_url": "https://translate-dev.freebsd.org/translate/documentation/booksarch-handbookmac_index/el/?checksum=13ed2f83b1b117ba", "url": "https://translate-dev.freebsd.org/api/units/1638876/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-17T12:39:55.320470Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/booksarch-handbookmac_index/el/?format=api", "source": [ "Introduction" ], "previous_source": "", "target": [ "Εισαγωγή" ], "id_hash": 5330140601372690748, "content_hash": 5330140601372690748, "location": "documentation/content/en/books/arch-handbook/mac/_index.adoc:81", "context": "", "note": "type: Title ==", "flags": "no-wrap", "labels": [], "state": 20, "fuzzy": false, "translated": true, "approved": false, "position": 12, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 1, "source_unit": "https://translate-dev.freebsd.org/api/units/1136872/?format=api", "priority": 100, "id": 1638877, "web_url": "https://translate-dev.freebsd.org/translate/documentation/booksarch-handbookmac_index/el/?checksum=c9f876a2fbb4c93c", "url": "https://translate-dev.freebsd.org/api/units/1638877/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-17T12:39:55.321323Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/booksarch-handbookmac_index/el/?format=api", "source": [ "The TrustedBSD MAC framework provides a mechanism to allow the compile-time or run-time extension of the kernel access control model. New system policies may be implemented as kernel modules and linked to the kernel; if multiple policy modules are present, their results will be composed. The MAC Framework provides a variety of access control infrastructure services to assist policy writers, including support for transient and persistent policy-agnostic object security labels. This support is currently considered experimental." ], "previous_source": "", "target": [ "" ], "id_hash": 1202350161205095802, "content_hash": 1202350161205095802, "location": "documentation/content/en/books/arch-handbook/mac/_index.adoc:87", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 13, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 76, "source_unit": "https://translate-dev.freebsd.org/api/units/1569837/?format=api", "priority": 100, "id": 1638878, "web_url": "https://translate-dev.freebsd.org/translate/documentation/booksarch-handbookmac_index/el/?checksum=90af9b19ee436d7a", "url": "https://translate-dev.freebsd.org/api/units/1638878/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-17T12:39:55.322148Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/booksarch-handbookmac_index/el/?format=api", "source": [ "This chapter provides information appropriate for developers of policy modules, as well as potential consumers of MAC-enabled environments, to learn about how the MAC Framework supports access control extension of the kernel." ], "previous_source": "", "target": [ "" ], "id_hash": -2407089651893037161, "content_hash": -2407089651893037161, "location": "documentation/content/en/books/arch-handbook/mac/_index.adoc:89", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 14, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 32, "source_unit": "https://translate-dev.freebsd.org/api/units/1136876/?format=api", "priority": 100, "id": 1638879, "web_url": "https://translate-dev.freebsd.org/translate/documentation/booksarch-handbookmac_index/el/?checksum=5e984cb704659797", "url": "https://translate-dev.freebsd.org/api/units/1638879/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-17T12:39:55.323084Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/booksarch-handbookmac_index/el/?format=api", "source": [ "Policy Background" ], "previous_source": "", "target": [ "" ], "id_hash": -3968143178653469193, "content_hash": -3968143178653469193, "location": "documentation/content/en/books/arch-handbook/mac/_index.adoc:91", "context": "", "note": "type: Title ==", "flags": "no-wrap", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 15, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 2, "source_unit": "https://translate-dev.freebsd.org/api/units/1136878/?format=api", "priority": 100, "id": 1638880, "web_url": "https://translate-dev.freebsd.org/translate/documentation/booksarch-handbookmac_index/el/?checksum=48ee52cd9a7875f7", "url": "https://translate-dev.freebsd.org/api/units/1638880/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-17T12:39:55.323937Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/booksarch-handbookmac_index/el/?format=api", "source": [ "Mandatory Access Control (MAC), refers to a set of access control policies that are mandatorily enforced on users by the operating system. MAC policies may be contrasted with Discretionary Access Control (DAC) protections, by which non-administrative users may (at their discretion) protect objects. In traditional UNIX systems, DAC protections include file permissions and access control lists; MAC protections include process controls preventing inter-user debugging and firewalls. A variety of MAC policies have been formulated by operating system designers and security researches, including the Multi-Level Security (MLS) confidentiality policy, the Biba integrity policy, Role-Based Access Control (RBAC), Domain and Type Enforcement (DTE), and Type Enforcement (TE). Each model bases decisions on a variety of factors, including user identity, role, and security clearance, as well as security labels on objects representing concepts such as data sensitivity and integrity." ], "previous_source": "", "target": [ "" ], "id_hash": -523521515286449126, "content_hash": -523521515286449126, "location": "documentation/content/en/books/arch-handbook/mac/_index.adoc:98", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 16, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 136, "source_unit": "https://translate-dev.freebsd.org/api/units/1569839/?format=api", "priority": 100, "id": 1638881, "web_url": "https://translate-dev.freebsd.org/translate/documentation/booksarch-handbookmac_index/el/?checksum=78bc13f4a113b41a", "url": "https://translate-dev.freebsd.org/api/units/1638881/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-17T12:39:55.324802Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/booksarch-handbookmac_index/el/?format=api", "source": [ "The TrustedBSD MAC Framework is capable of supporting policy modules that implement all of these policies, as well as a broad class of system hardening policies, which may use existing security attributes, such as user and group IDs, as well as extended attributes on files, and other system properties. In addition, despite the name, the MAC Framework can also be used to implement purely discretionary policies, as policy modules are given substantial flexibility in how they authorize protections." ], "previous_source": "", "target": [ "" ], "id_hash": -8315669623547684987, "content_hash": -8315669623547684987, "location": "documentation/content/en/books/arch-handbook/mac/_index.adoc:101", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 17, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 78, "source_unit": "https://translate-dev.freebsd.org/api/units/1569841/?format=api", "priority": 100, "id": 1638882, "web_url": "https://translate-dev.freebsd.org/translate/documentation/booksarch-handbookmac_index/el/?checksum=0c98ce8922ef1785", "url": "https://translate-dev.freebsd.org/api/units/1638882/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-17T12:39:55.325767Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/booksarch-handbookmac_index/el/?format=api", "source": [ "MAC Framework Kernel Architecture" ], "previous_source": "", "target": [ "" ], "id_hash": -3217384051545982408, "content_hash": -3217384051545982408, "location": "documentation/content/en/books/arch-handbook/mac/_index.adoc:103", "context": "", "note": "type: Title ==", "flags": "no-wrap", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 18, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 4, "source_unit": "https://translate-dev.freebsd.org/api/units/1136884/?format=api", "priority": 100, "id": 1638883, "web_url": "https://translate-dev.freebsd.org/translate/documentation/booksarch-handbookmac_index/el/?checksum=53598e4065983a38", "url": "https://translate-dev.freebsd.org/api/units/1638883/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-17T12:39:55.326667Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/booksarch-handbookmac_index/el/?format=api", "source": [ "The TrustedBSD MAC Framework permits kernel modules to extend the operating system security policy, as well as providing infrastructure functionality required by many access control modules. If multiple policies are simultaneously loaded, the MAC Framework will usefully (for some definition of useful) compose the results of the policies." ], "previous_source": "", "target": [ "" ], "id_hash": 294676326128460813, "content_hash": 294676326128460813, "location": "documentation/content/en/books/arch-handbook/mac/_index.adoc:107", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 19, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 48, "source_unit": "https://translate-dev.freebsd.org/api/units/1569843/?format=api", "priority": 100, "id": 1638884, "web_url": "https://translate-dev.freebsd.org/translate/documentation/booksarch-handbookmac_index/el/?checksum=8416e68eae9aa40d", "url": "https://translate-dev.freebsd.org/api/units/1638884/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-17T12:39:55.327409Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/booksarch-handbookmac_index/el/?format=api", "source": [ "Kernel Elements" ], "previous_source": "", "target": [ "" ], "id_hash": -832656426914401084, "content_hash": -832656426914401084, "location": "documentation/content/en/books/arch-handbook/mac/_index.adoc:109", "context": "", "note": "type: Title ===", "flags": "no-wrap", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 20, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 2, "source_unit": "https://translate-dev.freebsd.org/api/units/1136888/?format=api", "priority": 100, "id": 1638885, "web_url": "https://translate-dev.freebsd.org/translate/documentation/booksarch-handbookmac_index/el/?checksum=7471cf642dd234c4", "url": "https://translate-dev.freebsd.org/api/units/1638885/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-17T12:39:55.328181Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/booksarch-handbookmac_index/el/?format=api", "source": [ "The MAC Framework contains a number of kernel elements:" ], "previous_source": "", "target": [ "" ], "id_hash": 5939975739836445957, "content_hash": 5939975739836445957, "location": "documentation/content/en/books/arch-handbook/mac/_index.adoc:112", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 21, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 9, "source_unit": "https://translate-dev.freebsd.org/api/units/1136890/?format=api", "priority": 100, "id": 1638886, "web_url": "https://translate-dev.freebsd.org/translate/documentation/booksarch-handbookmac_index/el/?checksum=d26f0876cb63b505", "url": "https://translate-dev.freebsd.org/api/units/1638886/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-17T12:39:55.328893Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/booksarch-handbookmac_index/el/?format=api", "source": [ "Framework management interfaces" ], "previous_source": "", "target": [ "" ], "id_hash": -4223738923972227491, "content_hash": -4223738923972227491, "location": "documentation/content/en/books/arch-handbook/mac/_index.adoc:114", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 22, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 3, "source_unit": "https://translate-dev.freebsd.org/api/units/1136892/?format=api", "priority": 100, "id": 1638887, "web_url": "https://translate-dev.freebsd.org/translate/documentation/booksarch-handbookmac_index/el/?checksum=456243d3b4a50e5d", "url": "https://translate-dev.freebsd.org/api/units/1638887/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-17T12:39:55.329712Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/booksarch-handbookmac_index/el/?format=api", "source": [ "Concurrency and synchronization primitives." ], "previous_source": "", "target": [ "" ], "id_hash": 829469116735162647, "content_hash": 829469116735162647, "location": "documentation/content/en/books/arch-handbook/mac/_index.adoc:115", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 23, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 4, "source_unit": "https://translate-dev.freebsd.org/api/units/1136894/?format=api", "priority": 100, "id": 1638888, "web_url": "https://translate-dev.freebsd.org/translate/documentation/booksarch-handbookmac_index/el/?checksum=8b82ddc457280917", "url": "https://translate-dev.freebsd.org/api/units/1638888/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-17T12:39:55.330581Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/booksarch-handbookmac_index/el/?format=api", "source": [ "Policy registration" ], "previous_source": "", "target": [ "" ], "id_hash": -6948625001858194114, "content_hash": -6948625001858194114, "location": "documentation/content/en/books/arch-handbook/mac/_index.adoc:116", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 24, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 2, "source_unit": "https://translate-dev.freebsd.org/api/units/1136896/?format=api", "priority": 100, "id": 1638889, "web_url": "https://translate-dev.freebsd.org/translate/documentation/booksarch-handbookmac_index/el/?checksum=1f9186604ed8253e", "url": "https://translate-dev.freebsd.org/api/units/1638889/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-17T12:39:55.331423Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/booksarch-handbookmac_index/el/?format=api", "source": [ "Extensible security label for kernel objects" ], "previous_source": "", "target": [ "" ], "id_hash": -8173491875136779833, "content_hash": -8173491875136779833, "location": "documentation/content/en/books/arch-handbook/mac/_index.adoc:117", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 25, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 6, "source_unit": "https://translate-dev.freebsd.org/api/units/1136898/?format=api", "priority": 100, "id": 1638890, "web_url": "https://translate-dev.freebsd.org/translate/documentation/booksarch-handbookmac_index/el/?checksum=0e91ec71cfee49c7", "url": "https://translate-dev.freebsd.org/api/units/1638890/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-17T12:39:55.332232Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/booksarch-handbookmac_index/el/?format=api", "source": [ "Policy entry point composition operators" ], "previous_source": "", "target": [ "" ], "id_hash": -6762094113497170287, "content_hash": -6762094113497170287, "location": "documentation/content/en/books/arch-handbook/mac/_index.adoc:118", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 26, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 5, "source_unit": "https://translate-dev.freebsd.org/api/units/1136900/?format=api", "priority": 100, "id": 1638891, "web_url": "https://translate-dev.freebsd.org/translate/documentation/booksarch-handbookmac_index/el/?checksum=2228373b1b3dbe91", "url": "https://translate-dev.freebsd.org/api/units/1638891/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-17T12:39:55.333002Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/booksarch-handbookmac_index/el/?format=api", "source": [ "Label management primitives" ], "previous_source": "", "target": [ "" ], "id_hash": 4728019069061281355, "content_hash": 4728019069061281355, "location": "documentation/content/en/books/arch-handbook/mac/_index.adoc:119", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 27, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 3, "source_unit": "https://translate-dev.freebsd.org/api/units/1136902/?format=api", "priority": 100, "id": 1638892, "web_url": "https://translate-dev.freebsd.org/translate/documentation/booksarch-handbookmac_index/el/?checksum=c19d4c4b0eabb64b", "url": "https://translate-dev.freebsd.org/api/units/1638892/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-17T12:39:55.333643Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/booksarch-handbookmac_index/el/?format=api", "source": [ "Entry point API invoked by kernel services" ], "previous_source": "", "target": [ "" ], "id_hash": -8180161475545496277, "content_hash": -8180161475545496277, "location": "documentation/content/en/books/arch-handbook/mac/_index.adoc:120", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 28, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 7, "source_unit": "https://translate-dev.freebsd.org/api/units/1136904/?format=api", "priority": 100, "id": 1638893, "web_url": "https://translate-dev.freebsd.org/translate/documentation/booksarch-handbookmac_index/el/?checksum=0e7a3a7a74c6852b", "url": "https://translate-dev.freebsd.org/api/units/1638893/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-17T12:39:55.334271Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/booksarch-handbookmac_index/el/?format=api", "source": [ "Entry point API to policy modules" ], "previous_source": "", "target": [ "" ], "id_hash": -1474516880372001700, "content_hash": -1474516880372001700, "location": "documentation/content/en/books/arch-handbook/mac/_index.adoc:121", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 29, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 6, "source_unit": "https://translate-dev.freebsd.org/api/units/1136906/?format=api", "priority": 100, "id": 1638894, "web_url": "https://translate-dev.freebsd.org/translate/documentation/booksarch-handbookmac_index/el/?checksum=6b8976b5aa1c145c", "url": "https://translate-dev.freebsd.org/api/units/1638894/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-17T12:39:55.334896Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/booksarch-handbookmac_index/el/?format=api", "source": [ "Entry points implementations (policy life cycle, object life cycle/label management, access control checks)." ], "previous_source": "", "target": [ "" ], "id_hash": -4263910280590523831, "content_hash": -4263910280590523831, "location": "documentation/content/en/books/arch-handbook/mac/_index.adoc:122", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 30, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 13, "source_unit": "https://translate-dev.freebsd.org/api/units/1136908/?format=api", "priority": 100, "id": 1638895, "web_url": "https://translate-dev.freebsd.org/translate/documentation/booksarch-handbookmac_index/el/?checksum=44d38c30e3440249", "url": "https://translate-dev.freebsd.org/api/units/1638895/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-17T12:39:55.335561Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/booksarch-handbookmac_index/el/?format=api", "source": [ "Policy-agnostic label-management system calls" ], "previous_source": "", "target": [ "" ], "id_hash": -3531368402588936342, "content_hash": -3531368402588936342, "location": "documentation/content/en/books/arch-handbook/mac/_index.adoc:123", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 31, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 4, "source_unit": "https://translate-dev.freebsd.org/api/units/1136910/?format=api", "priority": 100, "id": 1638896, "web_url": "https://translate-dev.freebsd.org/translate/documentation/booksarch-handbookmac_index/el/?checksum=4efe0f25d8a5d76a", "url": "https://translate-dev.freebsd.org/api/units/1638896/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-17T12:39:55.336174Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/booksarch-handbookmac_index/el/?format=api", "source": [ "`mac_syscall()` multiplex system call" ], "previous_source": "", "target": [ "" ], "id_hash": 8104997700485417970, "content_hash": 8104997700485417970, "location": "documentation/content/en/books/arch-handbook/mac/_index.adoc:124", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 32, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 4, "source_unit": "https://translate-dev.freebsd.org/api/units/1136912/?format=api", "priority": 100, "id": 1638897, "web_url": "https://translate-dev.freebsd.org/translate/documentation/booksarch-handbookmac_index/el/?checksum=f07abc776aca8bf2", "url": "https://translate-dev.freebsd.org/api/units/1638897/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-17T12:39:55.336792Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/booksarch-handbookmac_index/el/?format=api", "source": [ "Various security policies implemented as MAC policy modules" ], "previous_source": "", "target": [ "" ], "id_hash": 1175476221668860810, "content_hash": 1175476221668860810, "location": "documentation/content/en/books/arch-handbook/mac/_index.adoc:125", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 33, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 8, "source_unit": "https://translate-dev.freebsd.org/api/units/1136914/?format=api", "priority": 100, "id": 1638898, "web_url": "https://translate-dev.freebsd.org/translate/documentation/booksarch-handbookmac_index/el/?checksum=905021654a7da38a", "url": "https://translate-dev.freebsd.org/api/units/1638898/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-17T12:39:55.337388Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/booksarch-handbookmac_index/el/?format=api", "source": [ "Framework Management Interfaces" ], "previous_source": "", "target": [ "" ], "id_hash": 2124851361353177435, "content_hash": 2124851361353177435, "location": "documentation/content/en/books/arch-handbook/mac/_index.adoc:127", "context": "", "note": "type: Title ===", "flags": "no-wrap", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 34, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 3, "source_unit": "https://translate-dev.freebsd.org/api/units/1136916/?format=api", "priority": 100, "id": 1638899, "web_url": "https://translate-dev.freebsd.org/translate/documentation/booksarch-handbookmac_index/el/?checksum=9d7cfd0e21f6195b", "url": "https://translate-dev.freebsd.org/api/units/1638899/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-17T12:39:55.338008Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/booksarch-handbookmac_index/el/?format=api", "source": [ "The TrustedBSD MAC Framework may be directly managed using sysctl's, loader tunables, and system calls." ], "previous_source": "", "target": [ "" ], "id_hash": 2931141543850089723, "content_hash": 2931141543850089723, "location": "documentation/content/en/books/arch-handbook/mac/_index.adoc:130", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 35, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 15, "source_unit": "https://translate-dev.freebsd.org/api/units/1136918/?format=api", "priority": 100, "id": 1638900, "web_url": "https://translate-dev.freebsd.org/translate/documentation/booksarch-handbookmac_index/el/?checksum=a8ad81b44b931cfb", "url": "https://translate-dev.freebsd.org/api/units/1638900/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-17T12:39:55.338613Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/booksarch-handbookmac_index/el/?format=api", "source": [ "In most cases, sysctl's and loader tunables of the same name modify the same parameters, and control behavior such as enforcement of protections relating to various kernel subsystems. In addition, if MAC debugging support is compiled into the kernel, several counters will be maintained tracking label allocation. It is generally advisable that per-subsystem enforcement controls not be used to control policy behavior in production environments, as they broadly impact the operation of all active policies. Instead, per-policy controls should be preferred, as they provide greater granularity and greater operational consistency for policy modules." ], "previous_source": "", "target": [ "" ], "id_hash": -3848916046538620171, "content_hash": -3848916046538620171, "location": "documentation/content/en/books/arch-handbook/mac/_index.adoc:135", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 36, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 93, "source_unit": "https://translate-dev.freebsd.org/api/units/1569845/?format=api", "priority": 100, "id": 1638901, "web_url": "https://translate-dev.freebsd.org/translate/documentation/booksarch-handbookmac_index/el/?checksum=4a95e73f83c3c2f5", "url": "https://translate-dev.freebsd.org/api/units/1638901/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-17T12:39:55.339227Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/booksarch-handbookmac_index/el/?format=api", "source": [ "Loading and unloading of policy modules is performed using the system module management system calls and other system interfaces, including boot loader variables; policy modules will have the opportunity to influence load and unload events, including preventing undesired unloading of the policy." ], "previous_source": "", "target": [ "" ], "id_hash": 2087594464169675130, "content_hash": 2087594464169675130, "location": "documentation/content/en/books/arch-handbook/mac/_index.adoc:137", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 37, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 42, "source_unit": "https://translate-dev.freebsd.org/api/units/1136922/?format=api", "priority": 100, "id": 1638902, "web_url": "https://translate-dev.freebsd.org/translate/documentation/booksarch-handbookmac_index/el/?checksum=9cf8a01ac7e7c97a", "url": "https://translate-dev.freebsd.org/api/units/1638902/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-17T12:39:55.339983Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/booksarch-handbookmac_index/el/?format=api", "source": [ "Policy List Concurrency and Synchronization" ], "previous_source": "", "target": [ "" ], "id_hash": -8431825786370802278, "content_hash": -8431825786370802278, "location": "documentation/content/en/books/arch-handbook/mac/_index.adoc:139", "context": "", "note": "type: Title ===", "flags": "no-wrap", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 38, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 5, "source_unit": "https://translate-dev.freebsd.org/api/units/1136924/?format=api", "priority": 100, "id": 1638903, "web_url": "https://translate-dev.freebsd.org/translate/documentation/booksarch-handbookmac_index/el/?checksum=0afc231efb63bd9a", "url": "https://translate-dev.freebsd.org/api/units/1638903/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-17T12:39:55.340635Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/booksarch-handbookmac_index/el/?format=api", "source": [ "As the set of active policies may change at run-time, and the invocation of entry points is non-atomic, synchronization is required to prevent loading or unloading of policies while an entry point invocation is in progress, freezing the set of active policies for the duration. This is accomplished by means of a framework busy count: whenever an entry point is entered, the busy count is incremented; whenever it is exited, the busy count is decremented. While the busy count is elevated, policy list changes are not permitted, and threads attempting to modify the policy list will sleep until the list is not busy. The busy count is protected by a mutex, and a condition variable is used to wake up sleepers waiting on policy list modifications. One side effect of this synchronization model is that recursion into the MAC Framework from within a policy module is permitted, although not generally used." ], "previous_source": "", "target": [ "" ], "id_hash": -8538193191715139526, "content_hash": -8538193191715139526, "location": "documentation/content/en/books/arch-handbook/mac/_index.adoc:146", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 39, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 151, "source_unit": "https://translate-dev.freebsd.org/api/units/1569847/?format=api", "priority": 100, "id": 1638904, "web_url": "https://translate-dev.freebsd.org/translate/documentation/booksarch-handbookmac_index/el/?checksum=09823e878829103a", "url": "https://translate-dev.freebsd.org/api/units/1638904/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-17T12:39:55.341361Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/booksarch-handbookmac_index/el/?format=api", "source": [ "Various optimizations are used to reduce the overhead of the busy count, including avoiding the full cost of incrementing and decrementing if the list is empty or contains only static entries (policies that are loaded before the system starts, and cannot be unloaded). A compile-time option is also provided which prevents any change in the set of loaded policies at run-time, which eliminates the mutex locking costs associated with supporting dynamically loaded and unloaded policies as synchronization is no longer required." ], "previous_source": "", "target": [ "" ], "id_hash": 822367710238762257, "content_hash": 822367710238762257, "location": "documentation/content/en/books/arch-handbook/mac/_index.adoc:149", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 40, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 81, "source_unit": "https://translate-dev.freebsd.org/api/units/1569849/?format=api", "priority": 100, "id": 1638905, "web_url": "https://translate-dev.freebsd.org/translate/documentation/booksarch-handbookmac_index/el/?checksum=8b69a3134b886511", "url": "https://translate-dev.freebsd.org/api/units/1638905/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-17T12:39:55.342149Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/booksarch-handbookmac_index/el/?format=api", "source": [ "As the MAC Framework is not permitted to block in some entry points, a normal sleep lock cannot be used; as a result, it is possible for the load or unload attempt to block for a substantial period of time waiting for the framework to become idle." ], "previous_source": "", "target": [ "" ], "id_hash": -4298231099218105352, "content_hash": -4298231099218105352, "location": "documentation/content/en/books/arch-handbook/mac/_index.adoc:151", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 41, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 47, "source_unit": "https://translate-dev.freebsd.org/api/units/1136930/?format=api", "priority": 100, "id": 1638906, "web_url": "https://translate-dev.freebsd.org/translate/documentation/booksarch-handbookmac_index/el/?checksum=44599d9698916bf8", "url": "https://translate-dev.freebsd.org/api/units/1638906/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-17T12:39:55.342841Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/booksarch-handbookmac_index/el/?format=api", "source": [ "Label Synchronization" ], "previous_source": "", "target": [ "" ], "id_hash": -4016114965386570124, "content_hash": -4016114965386570124, "location": "documentation/content/en/books/arch-handbook/mac/_index.adoc:153", "context": "", "note": "type: Title ===", "flags": "no-wrap", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 42, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 2, "source_unit": "https://translate-dev.freebsd.org/api/units/1136932/?format=api", "priority": 100, "id": 1638907, "web_url": "https://translate-dev.freebsd.org/translate/documentation/booksarch-handbookmac_index/el/?checksum=4843e4b79f00d674", "url": "https://translate-dev.freebsd.org/api/units/1638907/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-17T12:39:55.343486Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/booksarch-handbookmac_index/el/?format=api", "source": [ "As kernel objects of interest may generally be accessed from more than one thread at a time, and simultaneous entry of more than one thread into the MAC Framework is permitted, security attribute storage maintained by the MAC Framework is carefully synchronized. In general, existing kernel synchronization on kernel object data is used to protect MAC Framework security labels on the object: for example, MAC labels on sockets are protected using the existing socket mutex. Likewise, semantics for concurrent access are generally identical to those of the container objects: for credentials, copy-on-write semantics are maintained for label contents as with the remainder of the credential structure. The MAC Framework asserts necessary locks on objects when invoked with an object reference. Policy authors must be aware of these synchronization semantics, as they will sometimes limit the types of accesses permitted on labels: for example, when a read-only reference to a credential is passed to a policy via an entry point, only read operations are permitted on the label state attached to the credential." ], "previous_source": "", "target": [ "" ], "id_hash": -4004190395367292499, "content_hash": -4004190395367292499, "location": "documentation/content/en/books/arch-handbook/mac/_index.adoc:160", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 43, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 172, "source_unit": "https://translate-dev.freebsd.org/api/units/1569851/?format=api", "priority": 100, "id": 1638908, "web_url": "https://translate-dev.freebsd.org/translate/documentation/booksarch-handbookmac_index/el/?checksum=486e420cef1a01ad", "url": "https://translate-dev.freebsd.org/api/units/1638908/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-17T12:39:55.344105Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/booksarch-handbookmac_index/el/?format=api", "source": [ "Policy Synchronization and Concurrency" ], "previous_source": "", "target": [ "" ], "id_hash": -7463241460872657650, "content_hash": -7463241460872657650, "location": "documentation/content/en/books/arch-handbook/mac/_index.adoc:162", "context": "", "note": "type: Title ===", "flags": "no-wrap", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 44, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 4, "source_unit": "https://translate-dev.freebsd.org/api/units/1136936/?format=api", "priority": 100, "id": 1638909, "web_url": "https://translate-dev.freebsd.org/translate/documentation/booksarch-handbookmac_index/el/?checksum=186d3d6eebb7c50e", "url": "https://translate-dev.freebsd.org/api/units/1638909/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-17T12:39:55.344880Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/booksarch-handbookmac_index/el/?format=api", "source": [ "Policy modules must be written to assume that many kernel threads may simultaneously enter one more policy entry points due to the parallel and preemptive nature of the FreeBSD kernel. If the policy module makes use of mutable state, this may require the use of synchronization primitives within the policy to prevent inconsistent views on that state resulting in incorrect operation of the policy. Policies will generally be able to make use of existing FreeBSD synchronization primitives for this purpose, including mutexes, sleep locks, condition variables, and counting semaphores. However, policies should be written to employ these primitives carefully, respecting existing kernel lock orders, and recognizing that some entry points are not permitted to sleep, limiting the use of primitives in those entry points to mutexes and wakeup operations." ], "previous_source": "", "target": [ "" ], "id_hash": -5445859364880298079, "content_hash": -5445859364880298079, "location": "documentation/content/en/books/arch-handbook/mac/_index.adoc:168", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 45, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 129, "source_unit": "https://translate-dev.freebsd.org/api/units/1569853/?format=api", "priority": 100, "id": 1638910, "web_url": "https://translate-dev.freebsd.org/translate/documentation/booksarch-handbookmac_index/el/?checksum=346c6bc2d3934fa1", "url": "https://translate-dev.freebsd.org/api/units/1638910/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-17T12:39:55.345532Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/booksarch-handbookmac_index/el/?format=api", "source": [ "When policy modules call out to other kernel subsystems, they will generally need to release any in-policy locks in order to avoid violating the kernel lock order or risking lock recursion. This will maintain policy locks as leaf locks in the global lock order, helping to avoid deadlock." ], "previous_source": "", "target": [ "" ], "id_hash": 3311851213146128109, "content_hash": 3311851213146128109, "location": "documentation/content/en/books/arch-handbook/mac/_index.adoc:171", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 46, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 48, "source_unit": "https://translate-dev.freebsd.org/api/units/1569855/?format=api", "priority": 100, "id": 1638911, "web_url": "https://translate-dev.freebsd.org/translate/documentation/booksarch-handbookmac_index/el/?checksum=adf60f21a4857eed", "url": "https://translate-dev.freebsd.org/api/units/1638911/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-17T12:39:55.346248Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/booksarch-handbookmac_index/el/?format=api", "source": [ "Policy Registration" ], "previous_source": "", "target": [ "" ], "id_hash": 3252170252576622973, "content_hash": 3252170252576622973, "location": "documentation/content/en/books/arch-handbook/mac/_index.adoc:173", "context": "", "note": "type: Title ===", "flags": "no-wrap", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 47, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 2, "source_unit": "https://translate-dev.freebsd.org/api/units/1136942/?format=api", "priority": 100, "id": 1638912, "web_url": "https://translate-dev.freebsd.org/translate/documentation/booksarch-handbookmac_index/el/?checksum=ad22079d2dec097d", "url": "https://translate-dev.freebsd.org/api/units/1638912/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-17T12:39:55.346875Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/booksarch-handbookmac_index/el/?format=api", "source": [ "The MAC Framework maintains two lists of active policies: a static list, and a dynamic list. The lists differ only with regards to their locking semantics: an elevated reference count is not required to make use of the static list. When kernel modules containing MAC Framework policies are loaded, the policy module will use `SYSINIT` to invoke a registration function; when a policy module is unloaded, `SYSINIT` will likewise invoke a de-registration function. Registration may fail if a policy module is loaded more than once, if insufficient resources are available for the registration (for example, the policy might require labeling and insufficient labeling state might be available), or other policy prerequisites might not be met (some policies may only be loaded prior to boot). Likewise, de-registration may fail if a policy is flagged as not unloadable." ], "previous_source": "", "target": [ "" ], "id_hash": -7909768206130723603, "content_hash": -7909768206130723603, "location": "documentation/content/en/books/arch-handbook/mac/_index.adoc:180", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 48, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 136, "source_unit": "https://translate-dev.freebsd.org/api/units/1569857/?format=api", "priority": 100, "id": 1638913, "web_url": "https://translate-dev.freebsd.org/translate/documentation/booksarch-handbookmac_index/el/?checksum=123adbb969e644ed", "url": "https://translate-dev.freebsd.org/api/units/1638913/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-17T12:39:55.347515Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/booksarch-handbookmac_index/el/?format=api", "source": [ "Entry Points" ], "previous_source": "", "target": [ "" ], "id_hash": -35593301680266951, "content_hash": -35593301680266951, "location": "documentation/content/en/books/arch-handbook/mac/_index.adoc:182", "context": "", "note": "type: Title ===", "flags": "no-wrap", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 49, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 2, "source_unit": "https://translate-dev.freebsd.org/api/units/1136946/?format=api", "priority": 100, "id": 1638914, "web_url": "https://translate-dev.freebsd.org/translate/documentation/booksarch-handbookmac_index/el/?checksum=7f818c14a8f6e139", "url": "https://translate-dev.freebsd.org/api/units/1638914/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-17T12:39:55.348233Z" }, { "translation": "https://translate-dev.freebsd.org/api/translations/documentation/booksarch-handbookmac_index/el/?format=api", "source": [ "Kernel services interact with the MAC Framework in two ways: they invoke a series of APIs to notify the framework of relevant events, and they provide a policy-agnostic label structure pointer in security-relevant objects. The label pointer is maintained by the MAC Framework via label management entry points, and permits the Framework to offer a labeling service to policy modules through relatively non-invasive changes to the kernel subsystem maintaining the object. For example, label pointers have been added to processes, process credentials, sockets, pipes, vnodes, Mbufs, network interfaces, IP reassembly queues, and a variety of other security-relevant structures. Kernel services also invoke the MAC Framework when they perform important security decisions, permitting policy modules to augment those decisions based on their own criteria (possibly including data stored in security labels). Most of these security critical decisions will be explicit access control checks; however, some affect more general decision functions such as packet matching for sockets and label transition at program execution." ], "previous_source": "", "target": [ "" ], "id_hash": 7855208292440577424, "content_hash": 7855208292440577424, "location": "documentation/content/en/books/arch-handbook/mac/_index.adoc:189", "context": "", "note": "type: Plain text", "flags": "", "labels": [], "state": 0, "fuzzy": false, "translated": false, "approved": false, "position": 50, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 161, "source_unit": "https://translate-dev.freebsd.org/api/units/1569859/?format=api", "priority": 100, "id": 1638915, "web_url": "https://translate-dev.freebsd.org/translate/documentation/booksarch-handbookmac_index/el/?checksum=ed034e52c39f9590", "url": "https://translate-dev.freebsd.org/api/units/1638915/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2024-02-17T12:39:55.348850Z" } ] }