[SSSD] [PATCH] IPA: Use the correct domain when processing SELinux rules

Jakub Hrozek jhrozek at redhat.com
Sun Mar 9 22:00:17 UTC 2014


On Thu, Mar 06, 2014 at 05:27:22PM +0100, Michal Židek wrote:
> On 03/05/2014 09:58 PM, Jakub Hrozek wrote:
> >We blindly used the user's domain for everything. That wrong in case the
> >user comes from a subdomain. We should use the IPA domain for accessing
> >the SELinux rules and host data and the user domain only for the user.
> >
> >https://fedorahosted.org/sssd/ticket/2270
> >
> 
> The code looks good. I need to leave the office soon, so I will do the
> testing tomorrow.
> 
> Michal

Bump, this patch is expected by downstream in a couple of days. I'll be
glad for any review comments, but because I won't be available tomorrow,
chances are I won't have the time to respin the patch until Tuesday if
nacked.



More information about the sssd-devel mailing list