Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Add service match using SeLinux Context | Simo Sorce | 2013-07-02 | 1 | -0/+71 |
Using getpeercon we can know the elinux context of the process talking to gssproxy. Use this information as an optional additional filter to match processes to service definitions. If a selinux_context option with a full user;role;type context is specified into a service section, then the connecting process must also be running under the specified selinux context in order to be allowed to connect. Signed-off-by: Simo Sorce <simo@redhat.com> Reviewed-by: Günther Deschner <gdeschner@redhat.com> |