[SSSD] [PATCH 0/4]: Actual memory cache implementation

Simo Sorce simo at redhat.com
Tue Jan 10 18:03:39 UTC 2012


On Tue, 2012-01-10 at 12:56 -0500, Dmitri Pal wrote:
> On 01/10/2012 11:26 AM, Simo Sorce wrote:
> > On Tue, 2012-01-10 at 10:59 -0500, Dmitri Pal wrote:
> >
> >> As there any SELinux implication with this feature?
> > I guess you mean the whole work not the email you quoted.
> 
> Yes. Sorry. It just occurred to me as I looked that email and I did not
> have time to find the right place for this comment.
> 
> > In that case the answer is yes, clients must be allowed to access the
> > files we create, but that is similar to the requirement to allow clients
> > to access the sssd_nss pipes so adjusting the selinux policies should be
> > easy.
> 
> So there is a special change to SELinux policy on per cache client basis?
> Should we file any SELinux bugs to make policy changes for this feature?

Yes, once the patches are accepted :-)

Simo.

-- 
Simo Sorce * Red Hat, Inc * New York




More information about the sssd-devel mailing list