supress loging for whole role

Submit your RBAC policies or suggest policy improvements

supress loging for whole role

Postby cross » Wed Nov 11, 2009 7:07 am

Hi!
I am searching the way to supress loging of access deny events for whole role. I find only object mode flag "s" which allow to supress loging only for this object.
Any other way to do my aim exept adding "s" mode to all objects inside all subject of this role?
cross
 
Posts: 5
Joined: Fri Nov 06, 2009 8:43 am

Re: supress loging for whole role

Postby spender » Wed Nov 11, 2009 10:10 am

There's currently no other way, but it's something I could add.

-Brad
spender
 
Posts: 2185
Joined: Wed Feb 20, 2002 8:00 pm


Return to RBAC policy development