Steve Grubb wrote:
On Friday 16 June 2006 15:57, Daniel J Walsh wrote:
I wanted to try to create an auditadm_r.
Didn't you mean httpdadm_r :)
I think we should bust up the systemadm role a little more and make it
composed of some other roles. RBAC says we are supposed to support
composition, so we can use it here.
Some other roles might be backup admin, db admin. mail admin.
-Steve
backupadm might be pretty tough, since I don't believe we run type
enforcement on any backup tools
so you would need to be able to read/write every file on the system, and
I see little benefit in this.
dbadmin would have to be better defined. IE MySQL/Postgresql/Oracle ...
ditto for mail admin.
Now doing a namedadm_r would be fairly easy.
Maybe even a dhcpd admin, but I am not sure if there would be demand for
those.
--
redhat-lspp mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/redhat-lspp
