[SSSD] [PATCH] SELINUX: Call setuid(0)/setgid(0) to also set the real IDs to root

Michal Židek mzidek at redhat.com
Mon Jan 26 20:29:31 UTC 2015


On 01/26/2015 06:22 PM, Jakub Hrozek wrote:
> Hi,
>
> Please see the commit message and the ticket description. Also please
> note that if you're testing with a non-privileged user, you also need to
> set:
>
> allow sssd_selinux_manager_t self:capability setgid;
> allow sssd_selinux_manager_t self:capability setuid;
>
> Otherwise there will be AVC denials.
>

Patch works fine. Will wait for the CI to finish before
final ack.

Michal




More information about the sssd-devel mailing list