diff options
| author | Simo Sorce <simo@redhat.com> | 2013-06-21 20:36:20 -0400 |
|---|---|---|
| committer | Günther Deschner <gdeschner@redhat.com> | 2013-07-02 16:17:23 +0200 |
| commit | acc3b87b655cf7c6c0c7d698f5a5867b6732a69f (patch) | |
| tree | 97f3d944770bfc78c92f1fff854d66b78df76de7 /proxy/src/gssproxy.c | |
| parent | f66a585e042fbb2f313c1cbde329088fac86cea6 (diff) | |
| download | gss-proxy-acc3b87b655cf7c6c0c7d698f5a5867b6732a69f.tar.gz gss-proxy-acc3b87b655cf7c6c0c7d698f5a5867b6732a69f.tar.xz gss-proxy-acc3b87b655cf7c6c0c7d698f5a5867b6732a69f.zip | |
Add service match using SeLinux Context
Using getpeercon we can know the elinux context of the process talking to
gssproxy. Use this information as an optional additional filter to match
processes to service definitions.
If a selinux_context option with a full user;role;type context is specified
into a service section, then the connecting process must also be running under
the specified selinux context in order to be allowed to connect.
Signed-off-by: Simo Sorce <simo@redhat.com>
Reviewed-by: Günther Deschner <gdeschner@redhat.com>
Diffstat (limited to 'proxy/src/gssproxy.c')
0 files changed, 0 insertions, 0 deletions