[rsbac] Best Practice

[Joerg Weber]

Hi Alberto,

I just wanted to say "thanks" for the help you provided today- it's
highly appreciated ;)
I hope that I reach astra quickly and that aspera won't be too rough ;)

Thanks again.

Joerg

> I'm in a hurry (monday ... augh!) but... I would suggest you to look at the
> examples:
> http://www.rsbac.org/examples.htm
> particularly at the RC solution. Obviously you'll apply the rights to the
> directories (/bin, /sbin ..... ) and to the "sparse" files (for example you
> have your favourite script /root/pippo.sh, apply the rights to the script
> and not to /root :-) In substance: what is executable is not writable and
> vice-versa (I know, it could be insufficient, but as a starting point it's
> valuable).
> "Per aspera ad astra"
> 
> Alberto Guglielmo

-- 
Joerg Weber
Network Security

infoServe GmbH
Nell-Breuning-Allee 6
D-66115 Saarbruecken

T: (0681) 8 80 08 - 0
F: (0681) 8 80 08 - 59
www.infos.de
E: j.weber at infos.de
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://gateway.compuniverse.de/pipermail/rsbac/attachments/20030707/8291e3ab/attachment.bin