[rsbac] Resources and Enhanced Role Compatibility

[Jörg Lübbert]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

My introduced negative role comp model doesn't work out as I thought it 
would which is why I have to give it a little bit more thinking. If I 
have something more satisfying i'll post it ;)

Meanwhile, a subject having many roles would still be great and quiet 
easy to implement if the rights of every single role are added to the 
final set of a subjects rights (instead of a user having to switch 
between the single roles).

My suggestion about resource control via RSBAC is still valid btw ;) 
It'd be great to control cpu time, memory and max open files via RSBACs 
RC and ACL module.

And I also had the idea that it would be nice to have Type groups 
instead of only the types (which gets a bit out of control if you have 
many types for different purposes and often add and delete types). It'd 
be really great and easy to maintain if you could have something like 
that in RSBAC...

- - Jörg Lübbert

- -- 
Core developer of:
Kaladix Linux - Secure And Versatile Linux Distribution
URL: http://www.kaladix.org
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQE9urOw4+zGoVB1iK8RAj2hAJ9nP6d3haecpZby60nkabKvp/GdjwCfQ9Bf
QNQimmz2xdLVPUhvTNxOnko=/Cf+
-----END PGP SIGNATURE-----