[rsbac] CAP learning mode and RC learning mode

[Javier J. Martínez Cabezón]

Hi amon, thanks for your answer and thanks for CAP learning mode, in
RC learning mode users should take it just as a starting point after
analize their system and setting the necessary roles and types and we
could advice it, RC learning mode will add necessary rights to the new
created role to the necessary types (it will save a lot of time of
review logs looking for DENIED AEF answers). We could add an advise to
the user to be careful with the policies generated at this way.

2009/9/29 Amon Ott <ao en rsbac.org>:
> On Monday 21 September 2009 wrote Javier J. Martínez Cabezón:
>> Hi all, I think that this two should be planned to inclusion as soon
>> as possible. It would make easier the policy development and the use
>> of rsbac for all "I don't have all my life to develop my policy" :)
>> and would be sufficient in my opinion to attract more users to the
>> system.
>
> I have just committed a CAP learning mode to the svn trunk tree. If max_caps
> for a user or program is too low, it will set the missing caps automatically.
>
> A simple RC learning mode would be quite easy, too, but would too often make
> the wrong settings - grant rights where you should rather introduce a new
> role or type.
>
> Amon.
> --
> http://www.rsbac.org - GnuPG: 2048g/5DEAAA30 2002-10-22
> _______________________________________________
> rsbac mailing list
> rsbac en rsbac.org
> http://www.rsbac.org/mailman/listinfo/rsbac