URL:
https://github.com/freeipa/freeipa/pull/2544
Author: fcami
Title: #2544: Add sysadm_r to default SELinux user map order
Action: opened
PR body:
"""
It is a standard SELinux user role included in RHEL (like
user_r, staff_r, guest_r) and used quite often.
See:
https://pagure.io/freeipa/issue/7658
So far the upgrade process is not covered, only new install.
I suppose a file like ./install/updates/50-ipaconfig.update has to be created for upgrades
to be covered.
Without the change to the ldif:
SELinux user map order:
guest_u:s0$xguest_u:s0$user_u:s0$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023
New install with the change to the ldif:
SELinux user map order:
guest_u:s0$xguest_u:s0$user_u:s0$staff_u:s0-s0:c0.c1023$sysadm_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023
"""
To pull the PR as Git branch:
git remote add ghfreeipa
https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/2544/head:pr2544
git checkout pr2544