[SSSD] [PATCHES] Patch set fixing SELinux - HBAC linking

Jakub Hrozek jhrozek at redhat.com
Fri Jul 20 15:46:33 UTC 2012


On Fri, Jul 20, 2012 at 05:27:44PM +0200, Jan Zelený wrote:
> > Oh right, it's and HBAC attribute..
> > 
> > Can't you just include ipa_hbac_private.h, then?
> 
> I didn't exactly like that solution either so I moved those two constants to 
> ipa_hbac.h which is supposed to be a public HBAC interface. The "right 
> solution" would be to construct a map for HBAC rules, I know we discussed this 
> with Stephen several months back but we never really got to do that.
> 

ipa_hbac.h is a public header of libipa_hbac, included in
libipa_hbac-devel. The attribute names don't have to be in the public
interface, I think that including the ipa_hbac_private.h header is just
fine.



More information about the sssd-devel mailing list