On 29.05.2012 15:36, Marcus Meissner wrote:
On Tue, May 29, 2012 at 03:34:27PM +0200, DenverD wrote:
On 05/29/2012 02:57 PM, Marcus Meissner wrote: less than full and selectable root powers is what sudo is all about, right?
If this would all be commandline root tools ... Yes.
But sadly, we are in 2012.
Things get configured and setup using DBUS, PolicyKit and friends ... but not sudo.
At least on RHEL sudo is patched to support switching roles when using SELinux RBAC, PolicyKit can easily sit on top of an RBAC implementation, in fact libpolkit on Solaris is only a shim on top of the native RBAC implementation. So it is possible to put the pieces together and get a unified RBAC implementation on Linux as well based on SELinux or AppArmor, it's just that nobody seems to bother implementing it. -- Guido Berhoerster -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org