LWN.net Logo

SELinux

SELinux

Posted Oct 10, 2009 0:22 UTC (Sat) by janfrode (subscriber, #244)
In reply to: SELinux by michaeljt
Parent article: LPC: Three sessions from the security track

No, it's "default deny", so the selinux policy adds permissions to do something.

User ID doesn't matter, except that you'll first need to pass the normal owner/group/permissions before selinux is involved (DAC before MAC).

"Roles" I'm not much familiar with..


(Log in to post comments)

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds