[SSSD] [PATCH] Write SELinux config files in responder instead of PAM module

Jan Zelený jzeleny at redhat.com
Fri Jul 27 09:19:39 UTC 2012


Dne pátek 27 července 2012 09:49:57, Jan Zelený napsal(a):
> Without this change, a process linking our PAM module would do the writing.
> That could be potentially problematic because everych such process will
> probably have its own selinux context. That would need rule in the policy
> for every process that is linked with PAM modules.
> 
> With this change, the context of process writing to the config file will be
> sssd_t, which makes life easier for SELinux policy maintainers.
> 
> Thanks
> Jan

Review done on IRC by Jakub, sending corrected patch.

Thanks
Jan
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jzeleny-167-1-write-selinux-files-in-responder.patch
Type: text/x-patch
Size: 10476 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20120727/3387275d/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: This is a digitally signed message part.
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20120727/3387275d/attachment.sig>


More information about the sssd-devel mailing list