diff options
| author | Rob Crittenden <rcritten@redhat.com> | 2012-02-09 16:52:07 -0500 |
|---|---|---|
| committer | Martin Kosek <mkosek@redhat.com> | 2012-02-15 12:28:37 +0100 |
| commit | 0086a3f5c3b744d7944b7235204c82139208de39 (patch) | |
| tree | 5b3c257562e08c02c764d930f7005998557a1e87 /install/updates/10-selinuxusermap.update | |
| parent | 8ad295a554a63f6b9101b080554fffa7f6f25c0a (diff) | |
| download | freeipa-0086a3f5c3b744d7944b7235204c82139208de39.tar.gz freeipa-0086a3f5c3b744d7944b7235204c82139208de39.tar.xz freeipa-0086a3f5c3b744d7944b7235204c82139208de39.zip | |
Add update files for SELinuxUserMap
https://fedorahosted.org/freeipa/ticket/2344
Diffstat (limited to 'install/updates/10-selinuxusermap.update')
| -rw-r--r-- | install/updates/10-selinuxusermap.update | 50 |
1 files changed, 50 insertions, 0 deletions
diff --git a/install/updates/10-selinuxusermap.update b/install/updates/10-selinuxusermap.update new file mode 100644 index 000000000..431477adf --- /dev/null +++ b/install/updates/10-selinuxusermap.update @@ -0,0 +1,50 @@ +# Add the SELinux User map config schema +dn: cn=schema +add:attributeTypes: + ( 2.16.840.1.113730.3.8.3.26 + NAME 'ipaSELinuxUserMapDefault' + DESC 'Default SELinux user' + EQUALITY caseIgnoreMatch + ORDERING caseIgnoreMatch + SUBSTR caseIgnoreSubstringsMatch + SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE + X-ORIGIN 'IPA v3') +add:attributeTypes: + ( 2.16.840.1.113730.3.8.3.27 + NAME 'ipaSELinuxUserMapOrder' + DESC 'Available SELinux user context ordering' + EQUALITY caseIgnoreMatch + ORDERING caseIgnoreMatch + SUBSTR caseIgnoreSubstringsMatch + SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE + X-ORIGIN 'IPA v3') + X-ORIGIN 'IPA v3') +replace:objectClasses:( 2.16.840.1.113730.3.8.2.1 NAME 'ipaGuiConfig' AUXILIARY MAY ( ipaUserSearchFields $$ ipaGroupSearchFields $$ ipaSearchTimeLimit $$ ipaSearchRecordsLimit $$ ipaCustomFields $$ ipaHomesRootDir $$ ipaDefaultLoginShell $$ ipaDefaultPrimaryGroup $$ ipaMaxUsernameLength $$ ipaPwdExpAdvNotify $$ ipaUserObjectClasses $$ ipaGroupObjectClasses $$ ipaDefaultEmailDomain $$ ipaMigrationEnabled $$ ipaCertificateSubjectBase ) )::( 2.16.840.1.113730.3.8.2.1 NAME 'ipaGuiConfig' AUXILIARY MAY ( ipaUserSearchFields $$ ipaGroupSearchFields $$ ipaSearchTimeLimit $$ ipaSearchRecordsLimit $$ ipaCustomFields $$ ipaHomesRootDir $$ ipaDefaultLoginShell $$ ipaDefaultPrimaryGroup $$ ipaMaxUsernameLength $$ ipaPwdExpAdvNotify $$ ipaUserObjectClasses $$ ipaGroupObjectClasses $$ ipaDefaultEmailDomain $$ ipaMigrationEnabled $$ ipaCertificateSubjectBase $$ ipaSELinuxUserMapDefault $$ ipaSELinuxUserMapOrder) ) + +# Add the SELinux User map schema +add:attributeTypes: + ( 2.16.840.1.113730.3.8.11.30 + NAME 'ipaSELinuxUser' + DESC 'An SELinux user' + EQUALITY caseIgnoreMatch + ORDERING caseIgnoreOrderingMatch + SUBSTR caseIgnoreSubstringsMatch + SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE + X-ORIGIN 'IPA v3') +add:objectClasses: + ( 2.16.840.1.113730.3.8.12.10 + NAME 'ipaSELinuxUserMap' SUP ipaAssociation + STRUCTURAL MUST ipaSELinuxUser + MAY ( accessTime $$ seeAlso ) + +# Create the SELinux User map container +dn: cn=selinux,$SUFFIX +default:objectClass: top +default:objectClass: nsContainer +default:cn: selinux + +dn: cn=usermap,cn=selinux,$SUFFIX +default:objectClass: top +default:objectClass: nsContainer +default:cn: usermap + |