[SSSD] [PATCH] IPA: Remove util/sss_selinux.c

Jakub Hrozek jhrozek at redhat.com
Thu Mar 13 19:36:29 UTC 2014


On Thu, Mar 13, 2014 at 03:09:44PM -0400, Simo Sorce wrote:
> On Thu, 2014-03-13 at 19:54 +0100, Jakub Hrozek wrote:
> > When working on the SELinux code lately, I found out that all the
> > functions from sss_selinux.c are consumed by ipa_selinux.c only. I
> > don't
> > think it makes sense to have a sss_selinux.c module in the util/ tree,
> > so I simply merged the functions into ipa_selinux.
> > 
> Wouldn't this require to branch them off again if the GPO work will
> allow us to store selinux maps in AD too ?
> 
> Simo.

I wasn't aware this was the plan. I think the answer depends on the schemas
in AD. The 'util' functions that process the mappings are closely tied to
how the SELinux maps in IPA are designed, especially with respect to how
the evaluation works and how the priorities are selected.



More information about the sssd-devel mailing list