[rsbac] granting syslog-ng the right to access /proc/rsbac-info/rmsg

Amon Ott ao at rsbac.org
Thu Jul 19 09:35:10 CEST 2007


On Wednesday 18 July 2007 21:23, Sven Seeland wrote:
> Hm, however if I change root's roles to auditor he isn't
> Administrator any more. Does that remove any rights that root might
> have? I can't find any documentation about AUTH and FF roles
> anywhere so I don't know what they do. I also couldn't find out
> where or if you can define your own roles or anything like that. I
> just know where to set them.

Administrator has very few rights in these models, it is mostly 
cosmetic. You cannot define more roles or change existing roles in 
these models, they are all hardwired. I agree that it should be 
documented in the model descriptions.

Amon.
-- 
http://www.rsbac.org - GnuPG: 2048g/5DEAAA30 2002-10-22


More information about the rsbac mailing list