So if I change my build.conf to be mls I should be up and running. I'm on RHEL5 btw On Fri, 2008-02-15 at 08:55 -0500, Paul Moore wrote: > On Thursday 14 February 2008 6:09:43 pm Jeremiah Jahn wrote: > > I see a number of places where the secadm_r role shows up, but It > > doesn't show up in the list of users and what not, Is there something > > simple I need to enable it, or do I need to build it from scratch? > > My goal it to have sysadm not able to modify policy enforcement, and > > my secadm not be able to do anything but. If there is a standard way > > to do this, I'd love to know. > > I believe the secadm_r role is only defined for the "mls" policy builds; > if you are running a "mcs" (the Fedora default) policy I don't think > the secadm_r role is present. > Boy, n.: A noise with dirt on it.
Attachment:
signature.asc
Description: This is a digitally signed message part
