On Tue, Aug 12, 2014 at 03:13:00PM +0200, Michal Židek wrote:
These two patches are initial patches for tickets
https://fedorahosted.org/sssd/ticket/2373
This is the local provider, targetting 1.13.
For the libselinux auditing, did you check if it is possible to use
libselinux to manage the mappings? The libselinux maintainer wasn't
quite sure, but suspected it wasn't possible.
Anyway, I think we should check if
a) using libselinux the way we use it in src/tools/selinux.c was
possible instead of writing out the flat files
b) if yes, then check if libselinux emits the audit messages we
need.
I will add wrappers for more libaudit functions as
needed in later patches.
As for now, the audit support is not build by default
so you need to run --with-libaudit. I would like to
make it default when we have the above tickets
solved.
Thanks,
Michal