On Wed, 27 Oct 2004 19:02:42 EDT, Colin Walters said:
>
> --=-SbXIVldVPnkD8EPP4/Kn
> Content-Type: text/plain
> Content-Transfer-Encoding: quoted-printable
>
> On Wed, 2004-10-27 at 18:29 -0400, Colin Walters wrote:
>
> > That's true, I guess it is useful if you still want them to be able to
> > share files etc (which full_user_role currently prevents without
> > additional work).
>
> Although, the additional work here is actually quite small (if indeed
> you do want these users to be able to access each other's files).
>
> full_user_role(bob)
> full_user_role(jane)
> define(`user_readonly_share',`
> allow $1_t $2_home_dir_t:dir { getattr search };
> r_dir_file($1_t, $2_home_t)
> allow $2_t $1_home_dir_t:dir { getattr search };
> r_dir_file($2_t, $1_home_t)
> ')
> user_readonly_share(bob, jane)
Ignore my previous mail, thanks.. ;)
This archive was generated by hypermail 2.1.3 : Thu Oct 28 2004 - 06:54:53 PDT