Mailinglist Archive: yast-devel (48 mails)

< Previous Next >
Re: [yast-devel] Gloves: Permissions Overview
  • From: Lukas Ocilka <lukas.ocilka@xxxxxxx>
  • Date: Thu, 29 Mar 2012 11:04:57 +0200
  • Message-id: <4F7425B9.5040705@suse.cz>
On 03/27/2012 06:02 PM, Lukas Ocilka wrote:
Hi,

I've created an overview drawing of two different solutions for Gloves
permissions/roles: low vs high level of roles. See http://bit.ly/Hd20ef

Frankly, it seems that neither of them can fully support roles hierarchy
as it is presented here: http://bit.ly/GQ8pvZ (or it needs quite a
complicated approach how to do that)

We've been discussing this from a different point of view with Michal today: The low-level-perms (on path) make it impossible to configure dynamically created sysconfig files for network (/etc/sysconfig/network/ifcfg-*), whereas the high-level-perms (Network Admin) don't care about specific files (but YLib has to take care about security itself).

Bye
Lukas

--

Lukas Ocilka, Appliances Department
SUSE LINUX s.r.o., Praha
--
To unsubscribe, e-mail: yast-devel+unsubscribe@xxxxxxxxxxxx
To contact the owner, e-mail: yast-devel+owner@xxxxxxxxxxxx

< Previous Next >
Follow Ups
References