Re: softmode vs. PM and RSBAC backup.

From: Amon Ott <ao@rsbac.org>
Subject: Re: softmode vs. PM and RSBAC backup.
Date: Thu, 14 Jun 2001 10:36:28 +0200

Next Article (by Date): Re: softmode vs. PM and RSBAC backup. Stanislav Ievlev
Previous Article (by Date): softmode vs. PM and RSBAC backup. Stanislav Ievlev
Top of Thread: softmode vs. PM and RSBAC backup. Stanislav Ievlev
Next in Thread: Re: softmode vs. PM and RSBAC backup. Stanislav Ievlev
Articles sorted by: [Date] [Author] [Subject]

On Mit, 13 Jun 2001 Stanislav Ievlev wrote:
> 1. Backup in RSBAC:
> We must turn off all modules for backup procedure now. But it's is not 
> secure. What about special role for backup (like in Windows NT). This 
> role must be only for special backup program, no for real users.

You should be able to backup everything with secoff running a MAC trusted setuid
root script. As usual, it depends on the active modules. Which modules are
active in your system?

> 2. Soft mode:
> I need more rights in soft_mode. RC working in "hard" mode under "soft" 
> mode now. Most RC operations  permitted only for role_admin. I apply 
> patch for it.

Your patch extending set rights to system_admin in soft mode has been included
into my tree now.

Amon.
-
To unsubscribe from the rsbac list, send a mail to
majordomo@rsbac.org with
unsubscribe rsbac
as single line in the body.

Go to Compuniverse LWGate Home Page.