Re: Latest diffs in policy

[Daniel J Walsh <dwalsh@redhat.com>]

Christopher J. PeBenito wrote:
> On Mon, 2006-05-15 at 16:54 -0400, Daniel J Walsh wrote:
>   
>> Christopher J. PeBenito wrote:
>>     
>>>> Separation of the auditadm from secadm and sysadm changes for auditd files.
>>>>     
>>>>         
>>> Filesystem association is missing.  This also brings along more problems
>>> like labeling.  There isn't much real separation between auditadm from
>>> the other admin roles, so this doesn't seem to have real benefits.
>>>   
>>>       
>> Required for LSPP.  auditadm is not allowed to do anything but manage 
>> audit subsystem.
>> secadmin can only manage selinux stuff.  sysadmin can only do everything 
>> not done by auditadm
>> and secadm.
>>     
>
> I don't see how we're accomplishing this if secadm, auditadm, and sysadm
> are using the admin_user_template().  It gives a lot of access including
> raw disk access, signalling all domains, managing the source and binary
> policies (explicitly given), and managing all files in general except
> shadow, and running insmod.  The current implementation doesn't allow
> for fine grained role definition yet (it is a planned improvement).
>
>   
Yes I am about to remove secadm and auditadm from admin_user_template to 
remove these privs.

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.