On Thu, Apr 04, 2013 at 12:24:05PM -0400, Simo Sorce wrote:
Commit should say it all.
We do not have any security issue (that I know off) with the current
code, but I want to tighten up the privileges more given we do not need
the additional capabilities in the krb5_child anyway.
Simo.
--
Simo Sorce * Red Hat, Inc * New York
I can't login with this patch. I'm getting:
(Fri Apr 5 12:21:07 2013) [[sssd[krb5_child[4130]]]] [become_user]
(0x0020): setgroups failed [1][Operation not permitted].
SELinux is Permissive on this particular machine.