diff options
| author | Petr Viktorin <pviktori@redhat.com> | 2012-06-06 00:44:58 -0400 |
|---|---|---|
| committer | Rob Crittenden <rcritten@redhat.com> | 2012-06-07 05:02:22 -0400 |
| commit | 6f1baf8b16e5c74ec1d2a8d9ebbf41c979e2f2d5 (patch) | |
| tree | 9538581b497a59205378d05351acdb6472fc7939 /ipa-client/ipa-getkeytab.c | |
| parent | 1fcbad4bcb6c3a98dc102c55bc17783ef7baff34 (diff) | |
| download | freeipa-6f1baf8b16e5c74ec1d2a8d9ebbf41c979e2f2d5.tar.gz freeipa-6f1baf8b16e5c74ec1d2a8d9ebbf41c979e2f2d5.tar.xz freeipa-6f1baf8b16e5c74ec1d2a8d9ebbf41c979e2f2d5.zip | |
Only allow root to run update plugins
Several plugins need restarting the DS (or they currently do
an external bind).
Rather than disabling plugins (possibly partially), refuse
to run them when run as an unprivileged user.
This means running ipa-ldap-updater as non-root requires specifying
a list of files, and omiting the --upgrade and --plugins options.
https://fedorahosted.org/freeipa/ticket/2621
Diffstat (limited to 'ipa-client/ipa-getkeytab.c')
0 files changed, 0 insertions, 0 deletions