On Tue, 2008-02-26 at 08:42 -0500, Christopher J. PeBenito wrote: > On Tue, 2008-02-26 at 20:26 +1100, Russell Coker wrote: > > On Tuesday 26 February 2008 07:17, Eamon Walsh <ewalsh@xxxxxxxxxxxxx> wrote: > > > > > This comes back to forthcoming effort for trying to use RBAC for role > > > > separation. That would eliminate the structural complexity we see due > > > > to using TE for the role separation > > > > > > Is work being done on this? I recall you said you were interested in > > > taking on this task. > > > > Is this going to involve using roles on filesystem objects? If not then how > > would you distinguish the files created by different roles? > > Yes, the plan is to use roles on objects. (note: requires a kernel change) -- Stephen Smalley National Security Agency -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.
