[grsec] Questions about full learning / feature wish for learn_config

Marc Schiffbauer marc at schiffbauer.net
Fri Mar 11 08:28:52 EST 2005


* Brad Spengler schrieb am 11.03.05 um 00:28 Uhr:

[...]
> 
> > * Or is there a way to tell the full learning system what roles to
> >   create?
> 
> It will create a user role for any user that performs an operation on 
> the system.  If a number of users with the same GID have roles created, 
> they will be reduced to a single group role.

Does this affect only the users primary group or any group a user is
member of?

If it does affect any group:
What if one does *not* want any group
roles or no group role for a specific group? 
Would it perhaps make sense to be able to specify that in
learn_config, too? It would give even more flexibility to the users.

  do-not-reduce-to-group groupX

or something like that.

-Marc
-- 
8AAC 5F46 83B4 DB70 8317  3723 296C 6CCA 35A6 4134
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://grsecurity.net/pipermail/grsecurity/attachments/20050311/bf0cdf46/attachment.pgp


More information about the grsecurity mailing list