roles

[Daniel J Walsh]

Gene Czarcinski wrote:
> I have been fooling around with RBAC and roles to see how it works and could 
> be used.
>
> If I understand correctly, either
> `
> 1. In order to add a new roles, you need to modify the source in the src.rpm 
> and create a "new" policy: gop or "Gene'c Own Policy".
>
> or
>
> 2. I do not know the correct "magic dance" to perform to add a new role 
> definition to an existing policy.
>
> Comment?
>
>   
You should be able to add a new role through a loadable policy module 
and then use semanage
to assign the role to SELinux Users.
> Gene
>
> --
> fedora-selinux-list mailing list
> fedora-selinux-list at redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-selinux-list
>