partial policy

Submit your RBAC policies or suggest policy improvements

Moderators: spender, PaX Team

partial policy

Postby slimm609 » Tue Mar 22, 2011 8:52 pm

is there a way to run a partial policy to do certain things but anything not defined in the policy is ok. like using the hidden flags and denying access to certain files but nothing else. The system would run as normal otherwise.


TIA
slimm609
 
Posts: 12
Joined: Sun Apr 01, 2007 6:36 am

Re: partial policy

Postby spender » Tue Mar 22, 2011 9:51 pm

In gradm_analyze.c you can remove any of the policy enforcement you want. I just won't ever ship a version of gradm with those things made optional.

-Brad
spender
 
Posts: 2185
Joined: Wed Feb 20, 2002 8:00 pm
Location: VA, USA


Return to RBAC policy development