[SSSD] [PATCH] Refactor the SELinux processing in the PAM responder a little

Jakub Hrozek jhrozek at redhat.com
Tue Feb 26 17:03:52 UTC 2013


On Tue, Feb 26, 2013 at 05:22:47PM +0100, Michal Židek wrote:
> On 01/07/2013 12:50 AM, Jakub Hrozek wrote:
> >I tried to move the whole PAM processing from the provider into the
> >responder but stumbled upon several things that had to be refactored in
> >order to make the code right. These two patches are a start, the next
> >phase should be getting rid of the per-request score.
> >
> >So far these patches are intended for master only and their review has
> >lower priority than reviewing any of the patches targeted for 1.9 as
> >well.
> >
> >[PATCH 1/2] PAM: Split SELinux processing into a separate module
> >No functional change, the SELinux processing just began to occupy a
> >substantial part of the PAM code, so it had to be split into its own
> >file.
> >
> >[PATCH 2/2] PAM: reuse existing code for reading selinux config
> >The PAM processing reimplemented splitting on separator for no good
> >reason. This patch utilizes the existing code to reduce code
> >duplication.
> >
> 
> Upcoming changes in SELinux processing will make these patches
> obsolete. No need to push them.
> 
> Thanks,
> Michal

Thanks, marked as superseded in patchwork.



More information about the sssd-devel mailing list