Navigation

Changeset 2757

Timestamp:

07/10/08 08:05:53 (5 months ago)

Author:

cpebenito

Message:

rbacsep: disable rbac separation.

Files:

r2678	r2757
27	27
28	28	define(`basic_rbac_conditions',`
29		r1 dom r2
30		or r1 == system_r
31		or r2 == system_r
32		or r2 == object_r
	29	# r1 dom r2
	30	# or r1 == system_r
	31	# or r2 == system_r
	32	# or r2 == object_r
33	33	')
34	34
35	35	define(`basic_rbac_constraint',`
36		constrain $1 all_$1_perms
37		(
38		basic_rbac_conditions
39		);
	36	#constrain $1 all_$1_perms
	37	#(
	38	# basic_rbac_conditions
	39	#);
40	40	')
41	41
42	42	define(`exempted_rbac_constraint',`
43		constrain $1 all_$1_perms
44		(
45		basic_rbac_conditions
	43	#constrain $1 all_$1_perms
	44	#(
	45	# basic_rbac_conditions
46	46	# or r1 domby $2
47		or t1 == $3
48		or t2 == $4
49		);
	47	# or t1 == $3
	48	# or t2 == $4
	49	#);
50	50	')
51	51
…	…
68	68	#
69	69
70		constrain process { sigchld sigkill sigstop signull signal ptrace getsched setsched getsession getpgid setpgid getcap setcap share getattr setrlimit }
71		(
72		basic_rbac_conditions
	70	#constrain process { sigchld sigkill sigstop signull signal ptrace getsched setsched getsession getpgid setpgid getcap setcap share getattr setrlimit }
	71	#(
	72	# basic_rbac_conditions
73	73	# or r1 domby rbacprocrole
74		or t1 == rbacprocsubj
75		or t2 == rbacprocobj
76		);
	74	# or t1 == rbacprocsubj
	75	# or t2 == rbacprocobj
	76	#);
77	77
78	78	constrain process { transition noatsecure siginh rlimitinh }

* Generating other formats may take time.