[SSSD] [PATCH] IPA: Use the correct domain when processing SELinux rules

Pavel Březina pbrezina at redhat.com
Tue Mar 11 16:34:07 UTC 2014


On 03/09/2014 11:00 PM, Jakub Hrozek wrote:
> On Thu, Mar 06, 2014 at 05:27:22PM +0100, Michal Židek wrote:
>> On 03/05/2014 09:58 PM, Jakub Hrozek wrote:
>>> We blindly used the user's domain for everything. That wrong in case the
>>> user comes from a subdomain. We should use the IPA domain for accessing
>>> the SELinux rules and host data and the user domain only for the user.
>>>
>>> https://fedorahosted.org/sssd/ticket/2270
>>>
>>
>> The code looks good. I need to leave the office soon, so I will do the
>> testing tomorrow.
>>
>> Michal
>
> Bump, this patch is expected by downstream in a couple of days. I'll be
> glad for any review comments, but because I won't be available tomorrow,
> chances are I won't have the time to respin the patch until Tuesday if
> nacked.

Ack.




More information about the sssd-devel mailing list