Usercreation-policy

Michael K. Johnson johnsonm at redhat.com
Wed Sep 24 18:52:56 UTC 2003


On Wed, Sep 24, 2003 at 02:35:26PM -0400, Bill Nottingham wrote:
> Enrico Scholz (enrico.scholz at informatik.tu-chemnitz.de) said: 
> > I think too, that most daemons need both a dedicated user and a dedicated
> > group.
> 
> Depending on what they do, certainly.

Actually, I'd like to point forward to SELinux for a possible solution.
With SELinux, you can generally separate them effectively without having
different users/groups.  SELinux is in the 2.6.0-test kernels and works
quite well...

michaelkjohnson

 "He that composes himself is wiser than he that composes a book."
 Linux Application Development                     -- Ben Franklin
 http://people.redhat.com/johnsonm/lad/





More information about the fedora-devel-list mailing list