[SSSD] [PATCH] Better confinment of keyrings

Simo Sorce simo at redhat.com
Fri Nov 11 23:18:55 UTC 2011


After a quick discussion with David Howells (maintainer of
keutils/keyrings) I created this patch for SSSD.

It should make the keyrings used to store user passwords not as easy to
access even for root by confining them to the sssd process and it's
children.

I haven't really tested it yet, but I guess we want to discuss if this
approach is ok first anyway.

Simo.

-- 
Simo Sorce * Red Hat, Inc * New York
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Set-more-strict-permissions-on-keyring.patch
Type: text/x-patch
Size: 3333 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20111111/0ab456fe/attachment.bin>


More information about the sssd-devel mailing list