[SSSD] [PATCH 0/4]: Actual memory cache implementation
Dmitri Pal
dpal at redhat.com
Tue Jan 10 17:56:34 UTC 2012
On 01/10/2012 11:26 AM, Simo Sorce wrote:
> On Tue, 2012-01-10 at 10:59 -0500, Dmitri Pal wrote:
>
>> As there any SELinux implication with this feature?
> I guess you mean the whole work not the email you quoted.
Yes. Sorry. It just occurred to me as I looked that email and I did not
have time to find the right place for this comment.
> In that case the answer is yes, clients must be allowed to access the
> files we create, but that is similar to the requirement to allow clients
> to access the sssd_nss pipes so adjusting the selinux policies should be
> easy.
So there is a special change to SELinux policy on per cache client basis?
Should we file any SELinux bugs to make policy changes for this feature?
> Simo.
>
>
--
Thank you,
Dmitri Pal
Sr. Engineering Manager IPA project,
Red Hat Inc.
-------------------------------
Looking to carve out IT costs?
www.redhat.com/carveoutcosts/
More information about the sssd-devel
mailing list