[SSSD] [PATCH] SELINUX: Set permissive umask for selinux operations

Michal Židek mzidek at redhat.com
Mon Jan 26 20:28:37 UTC 2015


On 01/26/2015 06:18 PM, Jakub Hrozek wrote:
> Hi,
>
> to reproduce, set a SELinux label for a user. Log in as the user and
> observer the permissions of /etc/selinux/targeted/modules/active
> changing to 0600. As a result, even local semanage tools didn't work..
>
>

The patch works fine. I will wait for the CI to finish before I ack it.
Just for the record, in my case the semanage tools worked even without
this patch, but I could see the unwanted changes in the directory
permissions - with this patch everything was OK.


Michal




More information about the sssd-devel mailing list