On Tue, 2012-01-10 at 12:56 -0500, Dmitri Pal wrote:
On 01/10/2012 11:26 AM, Simo Sorce wrote:
> On Tue, 2012-01-10 at 10:59 -0500, Dmitri Pal wrote:
>
>> As there any SELinux implication with this feature?
> I guess you mean the whole work not the email you quoted.
Yes. Sorry. It just occurred to me as I looked that email and I did not
have time to find the right place for this comment.
> In that case the answer is yes, clients must be allowed to access the
> files we create, but that is similar to the requirement to allow clients
> to access the sssd_nss pipes so adjusting the selinux policies should be
> easy.
So there is a special change to SELinux policy on per cache client basis?
Should we file any SELinux bugs to make policy changes for this feature?
Yes, once the patches are accepted :-)
Simo.
--
Simo Sorce * Red Hat, Inc * New York