URL:
https://github.com/SSSD/sssd/pull/688
Author: stanislavlevin
Title: #688: Allow non-privileged sssd user connect to private dbus
Action: opened
PR body:
"""
During startup SSSD monitor launches the children and stands on
a private dbus to waiting for a reply from them. But by default
dbus auth rules connection is allowed if the client is root or
has the same UID or anonymous is allowed. The forked children drop
their root privileges in favor of non-privileged user (e.g sssd).
In such a case there is no access to the monitor dbus connection
to say: "Hey, i'm here.". Thus, sssd service becomes
failed.
This patch changes the default dbus authorization rules for a
private connections to allow incomings from root or sssd user.
Fixes:
https://pagure.io/SSSD/sssd/issue/3871
"""
To pull the PR as Git branch:
git remote add ghsssd
https://github.com/SSSD/sssd
git fetch ghsssd pull/688/head:pr688
git checkout pr688