[SSSD] [PATCH] SELINUX: Call setuid(0)/setgid(0) to also set the real IDs to root

Michal Židek mzidek at redhat.com
Tue Jan 27 16:01:46 UTC 2015


On 01/26/2015 09:29 PM, Michal Židek wrote:
> On 01/26/2015 06:22 PM, Jakub Hrozek wrote:
>> Hi,
>>
>> Please see the commit message and the ticket description. Also please
>> note that if you're testing with a non-privileged user, you also need to
>> set:
>>
>> allow sssd_selinux_manager_t self:capability setgid;
>> allow sssd_selinux_manager_t self:capability setuid;
>>
>> Otherwise there will be AVC denials.
>>
>
> Patch works fine. Will wait for the CI to finish before
> final ack.
>
> Michal
>

Ack.





More information about the sssd-devel mailing list