2009-03-24 14:00:26

by Daniel Walsh

[permalink] [raw]
Subject: [refpolicy] services_sssd.patch

http://people.fedoraproject.org/~dwalsh/SELinux/F11/services_sssd.patch

New policy for the new sssd daemon (part of ipa.)


2009-04-07 14:44:13

by cpebenito

[permalink] [raw]
Subject: [refpolicy] services_sssd.patch

On Tue, 2009-03-24 at 10:00 -0400, Daniel J Walsh wrote:
> http://people.fedoraproject.org/~dwalsh/SELinux/F11/services_sssd.patch
>
> New policy for the new sssd daemon (part of ipa.)

Why isn't there just a module for ipa instead? Then it would have all
of the parts.

--
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150

2009-04-07 14:51:20

by Daniel Walsh

[permalink] [raw]
Subject: [refpolicy] services_sssd.patch

On 04/07/2009 10:44 AM, Christopher J. PeBenito wrote:
> On Tue, 2009-03-24 at 10:00 -0400, Daniel J Walsh wrote:
>> http://people.fedoraproject.org/~dwalsh/SELinux/F11/services_sssd.patch
>>
>> New policy for the new sssd daemon (part of ipa.)
>
> Why isn't there just a module for ipa instead? Then it would have all
> of the parts.
>
sssd is not necessarily tied to ipa, I believe the goal is to allow
caching of login information as well as support for more complex login
situations.

ipa policy is shipped with the ipa server software, sssd is shipped with
every client.