[SSSD] [PATCH 0/4]: Actual memory cache implementation

Dmitri Pal dpal at redhat.com
Tue Jan 10 17:56:34 UTC 2012


On 01/10/2012 11:26 AM, Simo Sorce wrote:
> On Tue, 2012-01-10 at 10:59 -0500, Dmitri Pal wrote:
>
>> As there any SELinux implication with this feature?
> I guess you mean the whole work not the email you quoted.

Yes. Sorry. It just occurred to me as I looked that email and I did not
have time to find the right place for this comment.

> In that case the answer is yes, clients must be allowed to access the
> files we create, but that is similar to the requirement to allow clients
> to access the sssd_nss pipes so adjusting the selinux policies should be
> easy.

So there is a special change to SELinux policy on per cache client basis?
Should we file any SELinux bugs to make policy changes for this feature?


> Simo.
>
>


-- 
Thank you,
Dmitri Pal

Sr. Engineering Manager IPA project,
Red Hat Inc.


-------------------------------
Looking to carve out IT costs?
www.redhat.com/carveoutcosts/






More information about the sssd-devel mailing list