Research Menu

.
Skip Search Box

SELinux Mailing List

Re: system_r and sysadm_r roles

From: Stephen Smalley <sds_at_epoch.ncsc.mil>
Date: Mon, 08 Mar 2004 09:50:47 -0500


On Mon, 2004-03-08 at 06:39, Carlos Anísio Monteiro wrote:
> I´d like to know why there is a transition permission between system_r
> and sysadm_r.
>
> Example: allow system_r sysadm_r;

The login process (which is a system_r process) transitions to sysadm_r for administrative logins.

> This would can induce the a problem of security ?

No, domain transitions are the key.

-- 
Stephen Smalley <sds@epoch.ncsc.mil>
National Security Agency


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
Received on Mon 8 Mar 2004 - 09:51:02 EST
 

Date Posted: Jan 15, 2009 | Last Modified: Jan 15, 2009 | Last Reviewed: Jan 15, 2009

 
bottom

National Security Agency / Central Security Service