On Wed, 2006-03-08 at 20:13 +0100, Erich Schubert wrote:
> > The patch is a reasonable example for adding roles, but I'm not sure
> > that it should be added. I can't think of a compelling need for it,
> > especially since its basically user_r with user_tcp_server enabled, as
> > you mention above.
>
> Except that you might not want to allow user_tcp_server for all users,
> and with netuser you can give this permission easily to individual users
> on a per-user basis.

That is true, but I don't find binding to generic ports to be a compelling reason to add another role to the upstream policy.

-- 
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.