[rsbac] Re: [rsbac]

Amon Ott rsbac@rsbac.org
Mon, 11 Mar 2002 11:12:19 +0100

On Monday, 11. March 2002 01:18, mail_lyzhou@163.net wrote:
>   I have installed RSBAC1.1.2 on 2.4.16kernel, with the MAC FF RC ACL AUTH
> modulse. now i want to protect some important process,and let them not be
> killed by superuser, is there any methods? thanks!

Use RC model, create new process type, create role with 
def_process_create_type set to the new type, assign role to program as 
initial or forced role or to user running the program, and set rights for 
roles to the new type.