Re: secadm question

[Paul Moore <paul.moore@hp.com>]

On Thursday 14 February 2008 6:09:43 pm Jeremiah Jahn wrote:
> I see a number of places where the secadm_r role shows up, but It
> doesn't show up in the list of users and what not, Is there something
> simple I need to enable it, or 	do I need to build it from scratch?
> My goal it to have sysadm not able to modify policy enforcement, and
> my secadm not be able to do anything but. If there is a standard way
> to do this, I'd love to know.

I believe the secadm_r role is only defined for the "mls" policy builds; 
if you are running a "mcs" (the Fedora default) policy I don't think 
the secadm_r role is present.

-- 
paul moore
linux security @ hp

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.