From: cpebenito@tresys.com (Christopher J. PeBenito)
Date: Fri, 12 Feb 2010 14:54:03 -0500
Subject: [refpolicy] services_nscd.patch
In-Reply-To: <4AFC81B0.8090304@redhat.com>
References: <4AFC81B0.8090304@redhat.com>
Message-ID: <1266004443.11004.9.camel@gorn.columbia.tresys.com>
To: refpolicy@oss.tresys.com
List-Id: refpolicy.oss.tresys.com

On Thu, 2009-11-12 at 16:44 -0500, Daniel J Walsh wrote:
> http://people.fedoraproject.org/~dwalsh/SELinux/F12/services_nscd.patch
> 
> Added boolean to make nscd_use_shm the default for speed purposes.
> auth_use_nsswitch now uses this.
> 
> package maintainer asked for this.

Are you referring to a change in default for nsswitch or for nscd?

If its actually changing nsswitch's behavior to make it connect over shm
instead of over socket, the conditional should go in auth_use_nsswitch
instead.  So then it would look like this in auth_use_nsswitch:

tunable_policy(`auth_nscd_shm',`
	nscd_shm_use($1)
',`
	nscd_socket_use($1)
')

-- 
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150