Re: Security Officer and System Administrator Separation of Duties

On Sat, 4 Oct 2003 00:53, Tom wrote:
> On Fri, Oct 03, 2003 at 09:32:33PM +1000, Russell Coker wrote:
> > I think that perhaps you misunderstood my message. My point is that
> > anyone who can write to programs such as fsck and run them in their usual
> > context can trivially bypass any other security restrictions.
>
> I get you.
>
> Yes, it appears that a good configuration will need a third role for
> software updates and machine-level configurations.

If that is the case then we need to fix the policy to allow multiple admin_domain() entries.

Currently no-one has written any policy that has more than one admin_domain, so the chances of that working are quite small.

-- 
http://www.coker.com.au/selinux/   My NSA Security Enhanced Linux packages
http://www.coker.com.au/bonnie++/  Bonnie++ hard drive benchmark
http://www.coker.com.au/postal/    Postal SMTP/POP benchmark
http://www.coker.com.au/~russell/  My home page


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.