Use of role dominance declaration

Use of role dominance declaration

[Mario Fanelli]

[-- Attachment #1: Type: text/plain, Size: 95 bytes --]

I don't understand what means role dominance declaration.. Anyone can give
me an explanation?


[-- Attachment #2: Type: text/html, Size: 1475 bytes --]

Re: Use of role dominance declaration

[Christopher J. PeBenito]

On Mon, 2006-05-29 at 18:11 +0200, Mario Fanelli wrote:
> I don’t understand what means role dominance declaration.. Anyone can
> give me an explanation?

This means that a role will be allowed all the types of all roles that
it dominates in addition to those it is explicitly allowed.  For
example, say you have two roles foo_r and bar_r declared thusly:

role foo_r types a_t;
role bar_r types b_t;

if you make foo_r dominate bar_r:

dominance { role foo_r { role bar_r; } }

then the result is that foo_r is allowed a_t and b_t, and bar_r is
allowed b_t.

-- 
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150



--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.