[MLS Policy]:- MLS policy enforcing mode problem when manully restart the system services.

Stephen Smalley sds at tycho.nsa.gov
Thu Jun 12 17:01:44 UTC 2008


On Thu, 2008-06-12 at 17:44 +0530, prakash hallalli wrote:
> HI All
> I have to configure the Role-based access control (RBAC) for smbldap
> user.
> How should i set the roles for users and which policy i should use?
> 
> Now i am using MLS Policy for configure the RBAC. 
> I am not sure this the correct way for configure the RBAC on CentOS
> 5.1.
> 
> Please help me what i am going wrong.

If you only want support for user roles, then you don't need -mls
policy.  You can use -strict policy (prior to F8), or in F8 or later you
can just map users to roles via semanage while using the default
targeted policy.

-- 
Stephen Smalley
National Security Agency




More information about the fedora-selinux-list mailing list