[SSSD] [PATCH] IPA: Use the correct domain when processing SELinux rules

Michal Židek mzidek at redhat.com
Thu Mar 6 16:27:22 UTC 2014


On 03/05/2014 09:58 PM, Jakub Hrozek wrote:
> We blindly used the user's domain for everything. That wrong in case the
> user comes from a subdomain. We should use the IPA domain for accessing
> the SELinux rules and host data and the user domain only for the user.
>
> https://fedorahosted.org/sssd/ticket/2270
>

The code looks good. I need to leave the office soon, so I will do the
testing tomorrow.

Michal



More information about the sssd-devel mailing list