[grsec] effective dual roles / suggested enhancements

Brad Spengler spender at grsecurity.net
Tue Jan 11 17:39:48 EST 2005


> As for the $HOME thing, that would be an object set I defined?

No, just use it within the object name:

role spender u
subject /bin/blah
  ...
  $HOME/.bash_history ra

it automatically expands to the homedir of the user, in this case 
/home/spender.

If there are other macros like these that would be useful, let me know 
what they are, and I will add them.

-Brad
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://grsecurity.net/pipermail/grsecurity/attachments/20050111/d206a478/attachment.pgp


More information about the grsecurity mailing list