diff options
| author | Petr Viktorin <pviktori@redhat.com> | 2014-06-04 17:39:10 +0200 |
|---|---|---|
| committer | Martin Kosek <mkosek@redhat.com> | 2014-06-24 13:53:41 +0200 |
| commit | f8dc51860c4ec006e25314d934e530cdcdfa4dda (patch) | |
| tree | 30cb91de100f816725db6e89584474189635acc0 /install/updates/40-delegation.update | |
| parent | 820a60420da09dc52c7bd739d47b3bfad4da1b42 (diff) | |
| download | freeipa-f8dc51860c4ec006e25314d934e530cdcdfa4dda.tar.gz freeipa-f8dc51860c4ec006e25314d934e530cdcdfa4dda.tar.xz freeipa-f8dc51860c4ec006e25314d934e530cdcdfa4dda.zip | |
Convert SELinux User Map default permissions to managed
Part of the work for: https://fedorahosted.org/freeipa/ticket/4346
Reviewed-By: Martin Kosek <mkosek@redhat.com>
Diffstat (limited to 'install/updates/40-delegation.update')
| -rw-r--r-- | install/updates/40-delegation.update | 30 |
1 files changed, 0 insertions, 30 deletions
diff --git a/install/updates/40-delegation.update b/install/updates/40-delegation.update index e4023ce12..c451e8ee5 100644 --- a/install/updates/40-delegation.update +++ b/install/updates/40-delegation.update @@ -113,36 +113,6 @@ default:objectClass: nestedgroup default:cn: SELinux User Map Administrators default:description: SELinux User Map Administrators -dn: cn=Add SELinux User Maps,cn=permissions,cn=pbac,$SUFFIX -default:objectClass: top -default:objectClass: groupofnames -default:objectClass: ipapermission -default:cn: Add SELinux User Maps -default:member: cn=SELinux User Map Administrators,cn=privileges,cn=pbac,$SUFFIX - -dn: cn=Remove SELinux User Maps,cn=permissions,cn=pbac,$SUFFIX -default:objectClass: top -default:objectClass: groupofnames -default:objectClass: ipapermission -default:cn: Remove SELinux User Maps -default:member: cn=SELinux User Map Administrators,cn=privileges,cn=pbac,$SUFFIX - -dn: cn=Modify SELinux User Maps,cn=permissions,cn=pbac,$SUFFIX -default:objectClass: top -default:objectClass: groupofnames -default:objectClass: ipapermission -default:cn: Modify SELinux User Maps -default:member: cn=SELinux User Map Administrators,cn=privileges,cn=pbac,$SUFFIX - -dn: $SUFFIX -add:aci:'(target = "ldap:///ipauniqueid=*,cn=usermap,cn=selinux,$SUFFIX")(version 3.0;acl "permission:Add SELinux User Maps";allow (add) groupdn = "ldap:///cn=Add SELinux User Maps,cn=permissions,cn=pbac,$SUFFIX";)' - -dn: $SUFFIX -add:aci:'(target = "ldap:///ipauniqueid=*,cn=usermap,cn=selinux,$SUFFIX")(version 3.0;acl "permission:Remove SELinux User Maps";allow (delete) groupdn = "ldap:///cn=Remove SELinux User Maps,cn=permissions,cn=pbac,$SUFFIX";)' - -dn: $SUFFIX -add:aci:'(targetattr = "cn || memberuser || memberhost || seealso || ipaselinuxuser || ipaenabledflag")(target = "ldap:///ipauniqueid=*,cn=usermap,cn=selinux,$SUFFIX")(version 3.0;acl "permission:Modify SELinux User Maps";allow (write) groupdn = "ldap:///cn=Modify SELinux User Maps,cn=permissions,cn=pbac,$SUFFIX";)' - dn: cn=ipa,cn=etc,$SUFFIX add:aci:'(target = "ldap:///cn=*,cn=ca_renewal,cn=ipa,cn=etc,$SUFFIX")(version 3.0; acl "Add CA Certificates for renewals"; allow(add) userdn = "ldap:///fqdn=$FQDN,cn=computers,cn=accounts,$SUFFIX";)' add:aci:'(target = "ldap:///cn=*,cn=ca_renewal,cn=ipa,cn=etc,$SUFFIX")(targetattr = "userCertificate")(version 3.0; acl "Modify CA Certificates for renewals"; allow(write) userdn = "ldap:///fqdn=$FQDN,cn=computers,cn=accounts,$SUFFIX";)' |