Hello Markus,

On Sat, 27 Sep 2008 15:38:51 +0200
Markus Bartl <[EMAIL PROTECTED]> wrote:

> Hi there.
> 
> Ive got my SELinux kernel up and running.
> What im wondering about is that i can restart services without
> changing to the sysadm_r role.
> Im logged on as root but root belongs only to staff_r.
> Do I have to worry about it or is this just as expected?
> Im new to SELinux. Just dealed with regular hardened stuff so I get
> lost in the basics i guess.

root being staff_r after logging in is expected. There's no need to
give it extra priviliges unless root is actually going to do something
that requires them. In that case root is expected to use newrole to
change his role to sysadm_r.

regards,
nixnut

Attachment: signature.asc
Description: PGP signature

Reply via email to