Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I want to know what role is the highest role of SELinux.

If I am mistaken, can anyone tell me what roles are available by default in SELinux?

share|improve this question

1 Answer 1

up vote 1 down vote accepted

Welcome to ring 0! btw, you will need RBAC for role based restrictions. You did guess it? RBAC comes from Role Based Access Control, there is others too.

First of all you should really read about SELinux as it can be dangerous to just set/get privileges without knowing effects. See for example Hardened Gentoo Handbook.

I think that highest role is simply what you have given most access permissions... There is other solutions too, for example grsecurity also has its RBAC system. Gentoo Handbook first states that system_r is highest of default levels, however it has some restrictions too. You should go through manuals and define your roles as needed.

Here's article about RBAC in SELinux from IBM Linux Technology Center.

And here is few lines from Gentoo Handbook:

The system_r role is used for highly privileged system services. The system_r role is allowed to switch to any other "default" role. No role exception sysadm_r can switch to the system_r role.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.