Re: SUDO package

[Daniel J Walsh <dwalsh@redhat.com>]

Francois Leclerc wrote:

>Hello,
>what would be the value added of sudo when you have the SELinux ability 
>	to set roles
>	allocate roles to people
>	to set information domains
>	to avoid the "root" overpowerful model
>	to extend the policies?
>
>Regards,
>--FL
>
>  
>
SELinux does not remove root, it complements it.  So now you have two 
security models at the same time.
So anything that required root privaledge on your non SELinux system 
still requires root privs on the SELinux
system.  It also requires you to assume a role within SELinux that 
allows you to complete the task.  So a
sudo that allows you to execute commands as root and run under the 
required role would be benificial.

Dan


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.