[SSSD] [PATCH] Thighten up become_user()

Jakub Hrozek jhrozek at redhat.com
Fri Apr 5 10:22:32 UTC 2013


On Thu, Apr 04, 2013 at 12:24:05PM -0400, Simo Sorce wrote:
> Commit should say it all.
> We do not have any security issue (that I know off) with the current
> code, but I want to tighten up the privileges more given we do not need
> the additional capabilities in the krb5_child anyway.
> 
> Simo.
> 
> -- 
> Simo Sorce * Red Hat, Inc * New York

I can't login with this patch. I'm getting:
(Fri Apr  5 12:21:07 2013) [[sssd[krb5_child[4130]]]] [become_user]
(0x0020): setgroups failed [1][Operation not permitted].

SELinux is Permissive on this particular machine.



More information about the sssd-devel mailing list