[SSSD] [PATCH] GPO: add systemd-user to default gpo list

Stephen Gallagher sgallagh at redhat.com
Wed Jan 14 20:15:08 UTC 2015




On Wed, 2015-01-14 at 13:34 +0100, Pavel Reichl wrote:
> On 01/13/2015 08:39 PM, Stephen Gallagher wrote:
> >
> >
> > On Tue, 2015-01-13 at 18:58 +0100, Pavel Reichl wrote:
> >> Hello,
> >>
> >> please see simple patch attached.
> >>
> >> Thanks!
> >
> > Nack.
> >
> > First, what exactly is this service doing? I don't think we would want
> > to map it to ServiceLogonRight. That's intended for granting access to
> > the machine from a service (as opposed to a human user).
> >
> > Looking at it, this PAM stack (systemd-user) is called whenever the
> > system invokes starts a session instance of systemd. It seems to me,
> > this really belongs added to the list of default options for
> > ad_gpo_map_permit to always allow access (since this has to be allowed
> > for system functionality to work properly).
> >
> > Also, please update the manpages to match, since they specifically list
> > all of the default values.
> Thanks for comments, updated patch attached.

Ack
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 181 bytes
Desc: This is a digitally signed message part
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20150114/83cf0d66/attachment.sig>


More information about the sssd-devel mailing list