[redhat-lspp] RBAC Roles

James Morris jmorris at redhat.com
Wed Sep 21 20:29:55 UTC 2005


On Wed, 21 Sep 2005, Stephen Smalley wrote:

> syscall exit, as with the SELinux auditing rules.  With regard to binary
> format, I'm not sure what you plan to do about contexts, as we don't
> provide a stable binary representation of them to userspace presently,
> and doing so in a way that is policy-flexible and extensible isn't
> entirely trivial.

Binary kernel-user interfaces are bad news in general, so let's avoid 
this.


- James
-- 
James Morris
<jmorris at redhat.com>




More information about the redhat-lspp mailing list