There are quite a number of articles out there about Role Based Access Control, and number of them deal with using RBAC in conjunction with SELinux and enhanced PAM. Every last one of them has a nice diagram showing accounts, roles and activities; or whatever terminology is being employed, and the relationships between them. But most of the articles deal with CLI operation. Now I'm a CLI sort of guy, but when it comes down to this kind of "set theory" work I need some help. it doesn't matter if its those graphs, though using a visual tool can be overwhelming for non-trivial systems unless you have a filtering mechanism, which Dia and Gimp don't really have. Mindmapping tools often do, but they tend to be purely hierarchical :-( So I'm wondering if there is a dedicated RBAC GUi tool out there, one that has various "filter by.." options to manage the complexity. I've looked at this https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/htm... and have a strong "yes... but..." reaction. I'm not sure I can summarise in a few words why I don't think this is better than doing it with hand written tables. Perhaps part of it is that I've seen RBAC done with straight-forward UNIX groups and see no need for ACL. I've always agreed with Ritchie that the group mechanism was mathematically sufficient. Well, OK, there's Apparmor. Any other more visually enticing GUIs for managing RBAC? -- A: Yes. > Q: Are you sure? >> A: Because it reverses the logical flow of conversation. >>> Q: Why is top posting frowned upon? -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org