Re: [gentoo-hardened] su command

[Bill McCarty]

Hi Mike and all,

Thanks, Mike! That helps me understand my confusion.

Are lots of folks running Gentoo with policies other than that distributed 
in the Gentoo ebuild? I'd have expected anyone doing so to experience 
problems with emerge and other Gentoo-specific facilities. So, I infer that 
anyone doing so has significantly modified whatever policy they're using.

Cheers,

--On Tuesday, January 13, 2004 4:57 PM -0800 Michael Reilly 
<michaelr@×××××.com> wrote:

> staff_r can su with the older NSA released policy and with Richard
> Cocker's policy (I hope I spelled his name correctly).  I haven't tried
> the latest to see if the NSA policy has changed this or not
>
> I still use the older policy.  If my role is staff_r I can always su.
>
> The older policy dis-allows going directly to staff_r via ssh.  A newrole
> is needed.

---------------------------------------------------
Bill McCarty

--
gentoo-hardened@g.o mailing list