[SSSD] [PATCH] IPA: Use the correct domain when processing SELinux rules
Michal Židek
mzidek at redhat.com
Thu Mar 6 16:27:22 UTC 2014
On 03/05/2014 09:58 PM, Jakub Hrozek wrote:
> We blindly used the user's domain for everything. That wrong in case the
> user comes from a subdomain. We should use the IPA domain for accessing
> the SELinux rules and host data and the user domain only for the user.
>
> https://fedorahosted.org/sssd/ticket/2270
>
The code looks good. I need to leave the office soon, so I will do the
testing tomorrow.
Michal
More information about the sssd-devel
mailing list