A few questions

[Stephen Smalley]

On Thu, 2006-09-21 at 17:27 +0200, Salvo Giuffrida wrote:
> 
> 
> >From: "Christopher J. PeBenito" <cpebenito at tresys.com>
> >To: Salvo Giuffrida <giuffsalvo at hotmail.it>
> >CC: fedora-selinux-list at redhat.com
> >Subject: Re: A few questions
> >Date: Thu, 21 Sep 2006 10:15:06 -0400
> >
> > > - Why in the Fedora there isn't the "staff_r" role?
> >
> >There is staff_r in the strict policy.
> And why there isn't it in the targeted policy? I knew that only staff_r 
> users are allowed to enter sysadm_r, but in the targeted it seems that the 
> system_r is used as the "jump on" role for sysadm_r...

Targeted policy by definition doesn't restrict users, only daemons.

-- 
Stephen Smalley
National Security Agency