[rsbac] How to restrict root access almost entirely?

[Stefan Ohletz]

Amon Ott wrote:

>On Freitag, 1. Oktober 2004 12:48, Stefan Ohletz wrote:
>  
>
> [...]
>
>You can enable the new fake_root option in RSBAC v1.2.3. Then set 
>fake_root on the stupid program and it will always see uid 0 when 
>calling getuid().
>
>  
>
I already tried that and it didn't work. But as I recognized when reading your answer, I had forgotten to enable that option in my kernel. Now it works. :-)

Thank you very much,
Stefan