Messages in this thread | | | Date | Mon, 11 Sep 2006 04:06:05 -0400 (EDT) | From | James Morris <> | Subject | Re: [PATCH 3/4] security: capabilities patch (version 0.4.4), part 3/4: introduce new capabilities |
| |
On Sun, 10 Sep 2006, David Madore wrote:
> Can a non-root user create limited-rights processes without assistance > from the sysadmin, under SElinux?
SELinux uses a restrictive model, where privileges can only be removed, not added.
- James -- James Morris <jmorris@namei.org> - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |