[SSSD] [PATCH] Refactor the SELinux processing in the PAM responder a little

Michal Židek mzidek at redhat.com
Tue Feb 26 16:22:47 UTC 2013


On 01/07/2013 12:50 AM, Jakub Hrozek wrote:
> I tried to move the whole PAM processing from the provider into the
> responder but stumbled upon several things that had to be refactored in
> order to make the code right. These two patches are a start, the next
> phase should be getting rid of the per-request score.
>
> So far these patches are intended for master only and their review has
> lower priority than reviewing any of the patches targeted for 1.9 as
> well.
>
> [PATCH 1/2] PAM: Split SELinux processing into a separate module
> No functional change, the SELinux processing just began to occupy a
> substantial part of the PAM code, so it had to be split into its own
> file.
>
> [PATCH 2/2] PAM: reuse existing code for reading selinux config
> The PAM processing reimplemented splitting on separator for no good
> reason. This patch utilizes the existing code to reduce code
> duplication.
>

Upcoming changes in SELinux processing will make these patches obsolete. 
No need to push them.

Thanks,
Michal



More information about the sssd-devel mailing list