[SSSD] SELinux login management

Jakub Hrozek jhrozek at redhat.com
Wed Mar 31 11:12:36 UTC 2010


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Adds a new option -Z to sss_useradd and sss_usermod. This option allows
user to specify the SELinux login context for the user. On deleting the
user with sss_userdel, the login mapping is deleted, so subsequent
adding of the same user would result in the default login context unless
- -Z is specified again.

MLS security is not supported as of this patch.

Also adds explicit build dependency on libselinux-devel - it is dragged
in by krb5-devel currently, but I think the dependency should be listed
since we directly use functions from libselinux to set homedir contexts.

Addresses: #230
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAkuzLiMACgkQHsardTLnvCWgTQCg65NQNehKqYLiPjsCFs0kYLiU
4KYAoMcBB7/lAAkCblraMBpaZsGh1XzF
=q2rI
-----END PGP SIGNATURE-----
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Move-SELinux-related-functions-into-its-own-module.patch
Type: text/x-patch
Size: 5666 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20100331/4a2dd188/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0002-SELinux-login-management.patch
Type: text/x-patch
Size: 20013 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20100331/4a2dd188/attachment-0001.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Move-SELinux-related-functions-into-its-own-module.patch.sig
Type: application/pgp-signature
Size: 72 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20100331/4a2dd188/attachment.sig>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0002-SELinux-login-management.patch.sig
Type: application/pgp-signature
Size: 72 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20100331/4a2dd188/attachment-0001.sig>


More information about the sssd-devel mailing list