[rsbac] Help for NETxxx and CAPABILITIES

[Amon Ott]

On Friday, 19. April 2002 10:19, Amon Ott wrote:
> Bind role will also need CREATE on NETOBJ type 0 (to create a socket) and
> SEND, RECEIVE, ACCEPT, READ, WRITE on the remote client template's type (0
> by default).

Forgot to mention: If your named must connect to other named's, e.g. for 
uplink lookups or zone transfers, you can define another set of templates for 
these remote sites, an NETOBJ type for them, and allow CONNECT etc. on the 
type.

Amon.
--
http://www.rsbac.org