FC5/SELinux: Possibilty to enforce an "second set of eyes" method for admins?
Michael Decker
MDecker at tesis.de
Mon May 29 13:23:49 UTC 2006
Hi!
I wonder, if I can setup this kind of scenario:
An admin has to change e.g. some SELinux policies. But if an admin can
change all SELinux policies, he could change his own or others in a way,
so he can do anything. So a second admin/user has to allow that action.
Is there a way to setup that?
Thanks...
--
Michael Decker Michael.Decker at tesis.de
TESIS SYSware GmbH http://www.tesis.de
Baierbrunnerstr. 15 * 81379 Muenchen * Tel. +49 89 747377-0
More information about the fedora-selinux-list
mailing list