Next: 5.2 Contents of directory
Up: 5 Sample Simplified Policy
Previous: 5 Sample Simplified Policy
Contents
5.1 Default configuration in simplified policy
- Supported services in version 1.0.0
Supported services in sample policy are "auditd, syslogd, httpd,
webmin, iptables, network". They run as servicename_t domain.
- RBAC configuration
Three roles sysadm_r, staff_r, user_r are prepared by
default.
- sysadm_r
Can do everything. only user root can use this.
- staff_r
Have limited access rights. Can use su command. can read
/root. only root can use by default.
- user_r
Have limited access rights. Can not use su
command. Default role for every user.
2005-09-01