[SSSD] [PATCH] Thighten up become_user()

Simo Sorce simo at redhat.com
Thu Apr 4 16:24:05 UTC 2013


Commit should say it all.
We do not have any security issue (that I know off) with the current
code, but I want to tighten up the privileges more given we do not need
the additional capabilities in the krb5_child anyway.

Simo.

-- 
Simo Sorce * Red Hat, Inc * New York
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Further-restrict-become_user-drop-of-privileges.patch
Type: text/x-patch
Size: 3077 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20130404/ddd8ae26/attachment.bin>


More information about the sssd-devel mailing list