[SSSD] [PATCHES] SELinux processing related patches
Michal Židek
mzidek at redhat.com
Fri Mar 1 15:13:58 UTC 2013
Patch 1: Right now, we have SELinux procesing split between the provider
and responder. This patch moves it to provider only. So no partial
results are sent to responder for further processing, which makes the
processing steps easier to follow. (Originally the idea was to move the
processing to the responder, but completely removing the procesing from
provider and let it just update db turned to be more invasive than
completely removing the procesing from responder.) If this patch is
accepted, SELinux policy needs to be modified to allow sssd_be to write
the selinux login files.
https://fedorahosted.org/sssd/ticket/1743
Patch 2, 3: Reuse cached selinux maps. Patch 2 shows how it is done with
refresh interval fixed to 120 seconds. Patch 3 adds ipa option to
configure this interval (I didn't want to merge these patches for better
readability). Default value is 30 seconds.
https://fedorahosted.org/sssd/ticket/1744
Patches are attached.
Thanks
Michal
-------------- next part --------------
A non-text attachment was scrubbed...
Name: version.m4
Type: application/x-m4
Size: 430 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20130301/a5a2376c/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0003-Make-the-SELinux-refresh-time-configurable.patch
Type: text/x-patch
Size: 5437 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20130301/a5a2376c/attachment-0001.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0002-Reuse-cached-SELinux-mappings.patch
Type: text/x-patch
Size: 5175 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20130301/a5a2376c/attachment-0002.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Move-SELinux-processing-to-provider.patch
Type: text/x-patch
Size: 33366 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20130301/a5a2376c/attachment-0003.bin>
More information about the sssd-devel
mailing list