[SSSD] SELinux login management

Stephen Gallagher sgallagh at redhat.com
Tue Apr 6 18:47:20 UTC 2010


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 03/31/2010 07:12 AM, Jakub Hrozek wrote:
> Adds a new option -Z to sss_useradd and sss_usermod. This option allows
> user to specify the SELinux login context for the user. On deleting the
> user with sss_userdel, the login mapping is deleted, so subsequent
> adding of the same user would result in the default login context unless
> -Z is specified again.
> 
> MLS security is not supported as of this patch.
> 
> Also adds explicit build dependency on libselinux-devel - it is dragged
> in by krb5-devel currently, but I think the dependency should be listed
> since we directly use functions from libselinux to set homedir contexts.
> 
> Addresses: #230


Patch 0001: Minor nitpick. While you're moving the code, could you
please fix the whitespace errors in the selinux_file_context() description?

Patch 0002:
- --without-semanage should be implicit if --without-selinux is set,
unless you can convince me that there would ever be a platform that
supported one without the other.

Please correct whitespace error in sss_useradd.8.xml

Otherwise, this looks fine.



- -- 
Stephen Gallagher
RHCE 804006346421761

Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAku7gbgACgkQeiVVYja6o6NFdwCfc5oKzyOd67D3wRxElWic0V/U
2PsAn0iHNZKyN70lh3UDhUmKCmCrpdQU
=8zWs
-----END PGP SIGNATURE-----



More information about the sssd-devel mailing list