From: dwalsh@redhat.com (Daniel J Walsh)
Date: Fri, 12 Feb 2010 16:45:27 -0500
Subject: [refpolicy] services_nscd.patch
In-Reply-To: <1266004443.11004.9.camel@gorn.columbia.tresys.com>
References: <4AFC81B0.8090304@redhat.com>
	<1266004443.11004.9.camel@gorn.columbia.tresys.com>
Message-ID: <4B75CBF7.3040007@redhat.com>
To: refpolicy@oss.tresys.com
List-Id: refpolicy.oss.tresys.com

On 02/12/2010 02:54 PM, Christopher J. PeBenito wrote:
> On Thu, 2009-11-12 at 16:44 -0500, Daniel J Walsh wrote:
>> http://people.fedoraproject.org/~dwalsh/SELinux/F12/services_nscd.patch
>>
>> Added boolean to make nscd_use_shm the default for speed purposes.
>> auth_use_nsswitch now uses this.
>>
>> package maintainer asked for this.
> 
> Are you referring to a change in default for nsswitch or for nscd?
> 
> If its actually changing nsswitch's behavior to make it connect over shm
> instead of over socket, the conditional should go in auth_use_nsswitch
> instead.  So then it would look like this in auth_use_nsswitch:
> 
> tunable_policy(`auth_nscd_shm',`
> 	nscd_shm_use($1)
> ',`
> 	nscd_socket_use($1)
> ')
> 
That is fine.