staff_r

Is there any point to staff_r?

Currently it is a long way from usable for GUI sessions.

For terminal sessions the isolation between staff_r and user_r is matched by 
the isolation between user identities.

The role transition rules generally aren't used for anything and the roles 
permitted to an identity determine what role transitions can be used.

The vast majority of use of the reference policy is for "targeted" 
configurations without even using user_r.

Is there any reason for keeping staff_r?

-- 
My Main Blog         http://etbe.coker.com.au/
My Documents Blog    http://doc.coker.com.au/