[SSSD] [PATCH] Write SELinux config files in responder instead of PAM module

Jan Zelený jzeleny at redhat.com
Fri Jul 27 07:49:57 UTC 2012


Without this change, a process linking our PAM module would do the writing. 
That could be potentially problematic because everych such process will 
probably have its own selinux context. That would need rule in the policy for 
every process that is linked with PAM modules.

With this change, the context of process writing to the config file will be 
sssd_t, which makes life easier for SELinux policy maintainers.

Thanks
Jan
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jzeleny-167-write-selinux-files-in-responder.patch
Type: text/x-patch
Size: 8139 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20120727/1b4cda39/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: This is a digitally signed message part.
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20120727/1b4cda39/attachment.sig>


More information about the sssd-devel mailing list