Next: 3 Default RBAC Configuration Up: SELinux Policy Editor RBAC(Role Previous: 1.2 How RBAC works Contents

2 Enable RBAC

To enable RBAC, use following command.

# seedit-rbac on
(It takes some minutes)
# reboot

By above commands, files necessary to configure RBAC is moved from /etc/seedit/policy/extra to /etc/seedit/policy, and seedit-load is run.Reboot is necessary because some domains become invalid, to fix this you have to reboot.

To disable RBAC, use following.

# seedit-rbac off
# reboot

2006-07-05