[rsbac] Re: [rsbac]
Amon Ott
rsbac@rsbac.org
Mon, 11 Mar 2002 11:12:19 +0100
On Monday, 11. March 2002 01:18, mail_lyzhou@163.net wrote:
> I have installed RSBAC1.1.2 on 2.4.16kernel, with the MAC FF RC ACL AUTH
> modulse. now i want to protect some important process,and let them not be
> killed by superuser, is there any methods? thanks!
Use RC model, create new process type, create role with
def_process_create_type set to the new type, assign role to program as
initial or forced role or to user running the program, and set rights for
roles to the new type.
Amon.
--
http://www.rsbac.org