| |||||||||||||
Linux security non-modules and AppArmorLinux security non-modules and AppArmorPosted Jun 28, 2007 22:19 UTC (Thu) by flewellyn (subscriber, #5047)In reply to: Linux security non-modules and AppArmor by smoogen Parent article: Linux security non-modules and AppArmor
True enough. What I'm thinking of is some kind of higher-level policy which (for instance) organizes programs and files into groups. Then you add the group tag to a user, and that user has access (notwithstanding any DAC restrictions) to that set of programs and files. Somewhat akin to how traditional UNIX groups are used, except with MAC enforcement.
Or am I being silly?
(Log in to post comments)
|
|||||||||||||