[SSSD] [PATCHES] SELinux processing related patches

Michal Židek mzidek at redhat.com
Fri Mar 1 15:13:58 UTC 2013


Patch 1: Right now, we have SELinux procesing split between the provider 
and responder. This patch moves it to provider only. So no partial 
results are sent to responder for further processing, which makes the 
processing steps easier to follow. (Originally the idea was to move the 
processing to the responder, but completely removing the procesing from 
provider and let it just update db turned to be more invasive than 
completely removing the procesing from responder.) If this patch is 
accepted, SELinux policy needs to be modified to allow sssd_be to write 
the selinux login files.
https://fedorahosted.org/sssd/ticket/1743


Patch 2, 3: Reuse cached selinux maps. Patch 2 shows how it is done with 
refresh interval fixed to 120 seconds. Patch 3 adds ipa option to 
configure this interval (I didn't want to merge these patches for better 
readability). Default value is 30 seconds.
https://fedorahosted.org/sssd/ticket/1744


Patches are attached.

Thanks
Michal
-------------- next part --------------
A non-text attachment was scrubbed...
Name: version.m4
Type: application/x-m4
Size: 430 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20130301/a5a2376c/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0003-Make-the-SELinux-refresh-time-configurable.patch
Type: text/x-patch
Size: 5437 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20130301/a5a2376c/attachment-0001.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0002-Reuse-cached-SELinux-mappings.patch
Type: text/x-patch
Size: 5175 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20130301/a5a2376c/attachment-0002.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Move-SELinux-processing-to-provider.patch
Type: text/x-patch
Size: 33366 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20130301/a5a2376c/attachment-0003.bin>


More information about the sssd-devel mailing list