Re: [Security-Discuss] 2006 su problem

Anne Wilson <[email protected]> Tue, 18 Oct 2005 22:00:17 +0100
Newsgroups gmane.linux.mandrake.security.general
Message-ID <[email protected]>
On Tuesday 18 Oct 2005 19:12, Vincent Danen wrote:
> * AAW <[email protected]> [2005-10-18 08:09:15 -0500]:
> > > > What security level are you using?
> > >
> > > Standard, as I always have done before.  I've never tried higher
> > > levels because people seem to get into all sorts of problems if
> > > they don't know enough about configuring it.
> > >
> > > Anne
> >
> > Level 3 (Higher) isn't bad. That's what I used before creating my
> > own level.local file. It's 4 and 5 that cause the problems. If you
> > want to know what each level entails look at
> > /usr/share/msec/{level,perm}.[0-5] plus man mseclib for details.
> > The documentation
> > in /usr/share/doc/msec-<version>/ isn't always up to date.
> >
> > Good Luck,
> > Arn
> >
> > PS - Let me know off-list if you'd like a copy of my level.local
> > file. It has all the mseclib comments and is more conveniently
> > organized than the man page.
>
Arn, I may take you up on that, thanks.  When I was using GnomeMeeting a 
couple of years ago I did have to make some entries in .local, to stop 
them being changed (I'm fairly sure that was the file) but I haven't 
looked at it recently because I haven't needed it.

> Out of curiosity... what is it about msec that you actually
> like/need?

Once I found that I could control it for the few things I wanted 
different, I did like the comfort factor that Matt talks about.

Anne
-- 
Registered Linux User No.293302 (http://counter.li.org/)
Mandriva hints & tips: http://twiki.mdklinuxfaq.org
signature.asc (application/pgp-signature, 189 B)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (GNU/Linux)

iD8DBQBDVWJhkFAvMr/nNX8RAsuxAJoC3/0rrc4ySwKb2RQJT/xMwe/AwQCdElr8
4ccQFLDt5JCbyWYXxOFOVLs=
=qeYj
-----END PGP SIGNATURE-----