Re: FYI SELinux/AppArmor press

On 3/3/06, Erich Schubert <erich@debian.org> wrote:
> ...
> I agree that this is a good approach. However, this can still be solved
> by inheritance. For example, you could grant webalizer access to
> apache_logfiles, which is actually an "abstract" type, realized by two
> other types "apache_access_logs" and "apache_error_logs".

inheritance and least privilege is difficult; this might be something to discuss in more detail with a constraint model applied to ensure that an inheritance hierarchy does not leak excessive and unnecessary privileges. has this been discussed before on the devel list?

"Integrated constraints and inheritance in DTAC" http://portal.acm.org/citation.shtml?id=344307

"The Role-Based Access Control System of a European Bank: A Case Study and Discussion"
http://www-users.cs.york.ac.uk/~jeremy/papers/SACMAT2001.pdf

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.