[SSSD] [PATCH] Thighten up become_user()
Jakub Hrozek
jhrozek at redhat.com
Fri Apr 5 10:22:32 UTC 2013
On Thu, Apr 04, 2013 at 12:24:05PM -0400, Simo Sorce wrote:
> Commit should say it all.
> We do not have any security issue (that I know off) with the current
> code, but I want to tighten up the privileges more given we do not need
> the additional capabilities in the krb5_child anyway.
>
> Simo.
>
> --
> Simo Sorce * Red Hat, Inc * New York
I can't login with this patch. I'm getting:
(Fri Apr 5 12:21:07 2013) [[sssd[krb5_child[4130]]]] [become_user]
(0x0020): setgroups failed [1][Operation not permitted].
SELinux is Permissive on this particular machine.
More information about the sssd-devel
mailing list