-
Oliver Pinter authored
This change introduces the prefer_acl keyword, to control the order of rule evaluation. When the prefer_acl property was set on a specific rule, then it overrides the settings came from FS-EA based hbsdcontrol. FYI: by default the hbsdcontrol's settings overrides the secadm rules, since hbsdcontrol's evaluation is after the MAC framework's check. Signed-off-by: Oliver Pinter <oliver.pinter@hardenedbsd.org>
947e73dd