[rsbac] get current role

Amon Ott ao at rsbac.org
Thu Nov 27 16:46:17 CET 2003


On Donnerstag, 27. November 2003 16:02, Bencsath Boldizsar wrote:
> It is not so important, but as far as the "id" is a good way to debug
> programs, this can also be helpful.
> (E.g. "Look, this CGI program says it is executed with the user id of
> www-data, and look, it uses the role "webserver" and so it won't be able
> to harm anything, ... ...")
> So it can be  helpful for demonstration and/or debugging.
> Also, in "RC NOT_GRANTED" error messages it could be helpful to get back
> the Role that caused the error.

rsbac_debug_adf_rc shows both role and type at KERN_DEBUG level.
 
I should probably document this more prominently.

Amon.
-- 
http://www.rsbac.org - GnuPG: 2048g/5DEAAA30 2002-10-22



More information about the rsbac mailing list