Re: Alternative user management approach

[Daniel J Walsh <dwalsh@redhat.com>]

Ok this all sounds good, but how do we come to a consensus. 

Do we need an "role attribute" to define "user" roles.

roleattribute staff_r user;
roleattribute user_r user;
roleattribute sysadm_r user;

Then do we need a mechanism in policy to associate roles with "user" roles?

How does all this work with MLS ranges?

Should we have a brainstorming session?  It is important to us (Red Hat) 
that we get this settled soon.

Do we have a new file which associates uids to user roles?

Dan


-- 



--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.