grsecurity forums

I am a beginner in RBAC, hope the experienced can provide some help...

1. Is there any format for policy? Mayb something like

{secp, o+, secretary, {check}, time table, every 0900, holiday}

Is the statement above called the format of policy or just some sort of self-made documentation of policy? or should i call it as syntax of policy? i thought syntax of policy should be the language used to developed policy e.g XML.

2. Does policy divided into types?

Thanks for the help and please gift some links of reference regarding the question above

touched T.T

what wrote:1. Is there any format for policy?

have you looked at the sample policy file that comes with gradm?