Re: Latest diffs in policy

["Christopher J. PeBenito" <cpebenito@tresys.com>]

On Mon, 2006-05-15 at 16:54 -0400, Daniel J Walsh wrote:
> Christopher J. PeBenito wrote:
> >> Separation of the auditadm from secadm and sysadm changes for auditd files.
> >>     
> >
> > Filesystem association is missing.  This also brings along more problems
> > like labeling.  There isn't much real separation between auditadm from
> > the other admin roles, so this doesn't seem to have real benefits.
> >   
> Required for LSPP.  auditadm is not allowed to do anything but manage 
> audit subsystem.
> secadmin can only manage selinux stuff.  sysadmin can only do everything 
> not done by auditadm
> and secadm.

I don't see how we're accomplishing this if secadm, auditadm, and sysadm
are using the admin_user_template().  It gives a lot of access including
raw disk access, signalling all domains, managing the source and binary
policies (explicitly given), and managing all files in general except
shadow, and running insmod.  The current implementation doesn't allow
for fine grained role definition yet (it is a planned improvement).

-- 
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.