[rsbac] 1.4.0-rc3 released - errata

kang kang at rsbac.org
Mon Nov 10 15:31:24 CET 2008


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Small errata:
>
> About RSBAC 1.4: ---
>
> RSBAC 1.4 mainly introduce the new virtual user management feature,
>  which let you isolate complete set of users in so-called "virtual
> sets".
>
> As an example, you can start your mail server in a different set,
> and the users getting the email will not be part of the system
> users.
>
> Likewise, your jails can be started in a different set, so that the
>  users in that jail will never be the same ones as the real system
> users.
>
> You can specify the user set with the usual tools by specifying the
>  full user path, e.g.:
>
> 0:0 defines user id 0 (root) virtual set 0 (eg system user root)
> 0:1000 defines user id 1000 virtual set 0 (eg a system user) 1:400
> defines user id 400 (security) virtual set 1 2:1000  defines user
> id 1000 virtual set 2 (for example, mail users could be in set 2)
>
>
This was copied from the 1.4.0-rc1 announcement, however sets are
separated by /

E.g.:

0/0 defines user id 0 (root) virtual set 0 (eg system user root)
0/1000 defines user id 1000 virtual set 0 (eg a system user)
1/400 defines user id 400 (security) virtual set 1
2/1000  defines user id 1000 virtual set 2 (for example, mail users
could be in set 2)


kang

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iEYEAREIAAYFAkkYRbwACgkQ80VHuunDdyZhRgCfWuvLyCz4C954yJhuOlyTygg6
/boAnji1IXCmdHsqv9XaAHK+R1lINjwN
=B4KB
-----END PGP SIGNATURE-----



More information about the rsbac mailing list