Title: #457: ipa: Removal of umask(0) in selinux_child
On (22/11/17 12:23), fidencio wrote:
We're fine about RHEL-6 as long as we don't explicitly
backport it there.
I'm a little bit worried about openSUSE/SLES as they may use SELinux. Debian, AFAIR,
doesn't use SELinux (but I'd like to have Timo's confirmation here).
Actually situation is different.
*SUSE use apparmor and SSSD is compiled without SELinux and libsemanage.
But I do not thik many debian users use SELinux + libsemanage.
BTW debian stable has libsemanage 2.6 https://packages.debian.org/stretch/libsemanage1
@bachradsusi , do you know which upstream version of libsemanage does not
requires workaround with `umask(0)`?
See the full comment at https://github.com/SSSD/sssd/pull/457#issuecomment-346592086