Re: [patch] setting default role from ssh

[Timothy Wood <timothy@diyab.net>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1



Colin Walters wrote:
| On Mon, 2004-08-16 at 10:09 -0400, Stephen Smalley wrote:
|
| I wonder if the BSD people are really actively using it.  I guess though
| even if they weren't, the OpenSSH developers would be averse to breaking
| backwards compatibility for those who were.
|
|

It is still used.  Although the way they use it, from what I have run
into, is more like a way to define the authentication method you want to
use.  For example if you wanted to log in using skey you would use

username:skey@hostname

so maybe, as colin posted, using this

username/role:selinux@hostname

would be best.  If selinux is specified as the style it splits the
username and the desired role seperated by the / and tries to login
using that?

Timothy,
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFBIh/CPT0XLCkCs2ARArh8AKCE3bwnVg8mI+D35asQn1kL4h+IIACfQDxk
SFnMIQK0+7Tw1lfvwOERxEs=
=L90+
-----END PGP SIGNATURE-----

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.