partial policy

Submit your RBAC policies or suggest policy improvements

partial policy

Postby slimm609 » Tue Mar 22, 2011 8:52 pm

is there a way to run a partial policy to do certain things but anything not defined in the policy is ok. like using the hidden flags and denying access to certain files but nothing else. The system would run as normal otherwise.

Posts: 12
Joined: Sun Apr 01, 2007 6:36 am

Re: partial policy

Postby spender » Tue Mar 22, 2011 9:51 pm

In gradm_analyze.c you can remove any of the policy enforcement you want. I just won't ever ship a version of gradm with those things made optional.

Posts: 2185
Joined: Wed Feb 20, 2002 8:00 pm

Return to RBAC policy development