2009-11-12 21:44:16

by Daniel Walsh

Subject: [refpolicy] services_nscd.patch

http://people.fedoraproject.org/~dwalsh/SELinux/F12/services_nscd.patch

Added boolean to make nscd_use_shm the default for speed purposes. auth_use_nsswitch now uses this.

package maintainer asked for this.

Interacts with samba when it is domain controller.

2010-02-12 19:54:03

by cpebenito

Subject: [refpolicy] services_nscd.patch

On Thu, 2009-11-12 at 16:44 -0500, Daniel J Walsh wrote:
> http://people.fedoraproject.org/~dwalsh/SELinux/F12/services_nscd.patch
>
> Added boolean to make nscd_use_shm the default for speed purposes.
> auth_use_nsswitch now uses this.
>
> package maintainer asked for this.

Are you referring to a change in default for nsswitch or for nscd?

If its actually changing nsswitch's behavior to make it connect over shm
instead of over socket, the conditional should go in auth_use_nsswitch
instead. So then it would look like this in auth_use_nsswitch:

tunable_policy(`auth_nscd_shm',`
nscd_shm_use($1)
',`
nscd_socket_use($1)
')

--
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150

2010-02-12 21:45:27

by Daniel Walsh

Subject: [refpolicy] services_nscd.patch

On 02/12/2010 02:54 PM, Christopher J. PeBenito wrote:
> On Thu, 2009-11-12 at 16:44 -0500, Daniel J Walsh wrote:
>> http://people.fedoraproject.org/~dwalsh/SELinux/F12/services_nscd.patch
>>
>> Added boolean to make nscd_use_shm the default for speed purposes.
>> auth_use_nsswitch now uses this.
>>
>> package maintainer asked for this.
>
> Are you referring to a change in default for nsswitch or for nscd?
>
> If its actually changing nsswitch's behavior to make it connect over shm
> instead of over socket, the conditional should go in auth_use_nsswitch
> instead. So then it would look like this in auth_use_nsswitch:
>
> tunable_policy(`auth_nscd_shm',`
> nscd_shm_use($1)
> ',`
> nscd_socket_use($1)
> ')
>
That is fine.