On Mon, Aug 22, 2011 at 11:00:16PM +0200, Rados??aw Smogura wrote: > Maybe better idea will be to move one level upper and instead of working with > domain templates we should create role templates. I generally like idea of > roles, and I think it may be nice solution that administrator may give > someone > dba_admin role. > > So templates should not only create domains, but roles too. > > I may try to write few such templates.
That's perfectly possible. The reference policy contains a few default roles, but additional roles might always be submitted. However, for inclusion in Gentoo, please know that we try to follow the reference policy. So if you are writing roles, it is best to contribute them there: http://oss.tresys.com/projects/refpolicy That being said, most of the time roles are "fed" with the proper templates (you have _role or _run templates to execute applications, or _admin templates to manage daemons). Perhaps it would be better if someone drafts up a nice document on how to create your own roles (and maintain them)? Wkr, Sven Vermeulen
