[rsbac] Re: [rsbac]

Amon Ott rsbac@rsbac.org
Mon, 11 Mar 2002 11:12:19 +0100


On Monday, 11. March 2002 01:18, mail_lyzhou@163.net wrote:
>   I have installed RSBAC1.1.2 on 2.4.16kernel, with the MAC FF RC ACL AUTH
> modulse. now i want to protect some important process,and let them not be
> killed by superuser, is there any methods? thanks!

Use RC model, create new process type, create role with 
def_process_create_type set to the new type, assign role to program as 
initial or forced role or to user running the program, and set rights for 
roles to the new type.

Amon.
--
http://www.rsbac.org