[SSSD] [PATCH] SELINUX: Set permissive umask for selinux operations
Michal Židek
mzidek at redhat.com
Mon Jan 26 20:28:37 UTC 2015
On 01/26/2015 06:18 PM, Jakub Hrozek wrote:
> Hi,
>
> to reproduce, set a SELinux label for a user. Log in as the user and
> observer the permissions of /etc/selinux/targeted/modules/active
> changing to 0600. As a result, even local semanage tools didn't work..
>
>
The patch works fine. I will wait for the CI to finish before I ack it.
Just for the record, in my case the semanage tools worked even without
this patch, but I could see the unwanted changes in the directory
permissions - with this patch everything was OK.
Michal
More information about the sssd-devel
mailing list