RE: Alternative user management approach

[Stephen Smalley <sds@xxxxxxxxxxxxx>]

On Fri, 2005-06-24 at 13:04 -0400, Karl MacMillan wrote:
> To make my suggestion more concrete, I think a mapping file in
> /etc/selinux/policyname that maps from users to SELinux users. The config would
> be an ordered list of mappings that use username and group information. That
> means that if the admin wants to use group info they can, otherwise it is
> ignored. The first match in the ordered list would win. Maybe something like:
> 
> id:root	sysadm
> group:wheel staff
> default	normal

Default group?  Supplemental groups?

This only happens at login time (or su), not newgrp.

-- 
Stephen Smalley
National Security Agency


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with
the words "unsubscribe selinux" without quotes as the message.