URL: https://github.com/SSSD/sssd/pull/457 Title: #457: ipa: Removal of umask(0) in selinux_child
lslebodn commented: """ On (22/11/17 12:23), fidencio wrote:
We're fine about RHEL-6 as long as we don't explicitly backport it there.
I'm a little bit worried about openSUSE/SLES as they may use SELinux. Debian, AFAIR, doesn't use SELinux (but I'd like to have Timo's confirmation here).
Actually situation is different.
*SUSE use apparmor and SSSD is compiled without SELinux and libsemanage. But I do not thik many debian users use SELinux + libsemanage. BTW debian stable has libsemanage 2.6 https://packages.debian.org/stretch/libsemanage1
@bachradsusi , do you know which upstream version of libsemanage does not requires workaround with `umask(0)`?
LS
"""
See the full comment at https://github.com/SSSD/sssd/pull/457#issuecomment-346592086