selinux diversion [was Re: Usermode request: add patch enabling group membership to control auth user]

[Matthew Miller]

On Fri, Apr 16, 2004 at 12:19:49PM -0400, Daniel J Walsh wrote:
> >Yep. I'm just increasingly unsure about the implementation. If a SELinux
> >configuration can allow a user to access things that would normally be
> >denied by traditional Unix security, that's *crazy*.
> No DAC is still being enforced.

Not in usermode, apparently....

-- 
Matthew Miller           mattdm at mattdm.org        <http://www.mattdm.org/>
Boston University Linux      ------>                <http://linux.bu.edu/>