Did you see the following?
Yes, the cost for "open" is the worst, but others are not so bad
(read/write are not affected at all).
> but the configuration file syntax and user
> interface, ewwww. It renders it almost unusable in my eyes. You have
> *numbered* 'profiles' corresponding to (non-POSIX) capability sets, so you
> have to remember what each number corresponds to; backslashing of *all*
> metacharacters, including *, combined with the absence of an 'all below'
> option, leading to insanity like
I'm sorry for your eyes. ;-)
Profiles can be defined up to 256, but most cases you can live with
the following predefined ones.
profile 0: "disabled"
profile 1: "learning"
profile 2: "permissive"
profile 3: "enforcing"
Profile numbers have nothing with capabilities (and the just
merged version of TOMOYO Linux cannot control capabilities).
For more information, please take a look at the following documents.
> and hope your users don't create directories more than five deep under
> their $HOME, and that you didn't make a typo in that appalling forest.
Don't worry. You can define deeper directory patterns as you like.
Questions and suggestions are always welcome. Please visit our forum, too.
Copyright © 2017, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds