On Thursday 14 February 2008 6:09:43 pm Jeremiah Jahn wrote: > I see a number of places where the secadm_r role shows up, but It > doesn't show up in the list of users and what not, Is there something > simple I need to enable it, or do I need to build it from scratch? > My goal it to have sysadm not able to modify policy enforcement, and > my secadm not be able to do anything but. If there is a standard way > to do this, I'd love to know. I believe the secadm_r role is only defined for the "mls" policy builds; if you are running a "mcs" (the Fedora default) policy I don't think the secadm_r role is present. -- paul moore linux security @ hp -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.
