summaryrefslogtreecommitdiffstats
path: root/proxy/src/gp_selinux.h
Commit message (Collapse)AuthorAgeFilesLines
* Add service match using SeLinux ContextSimo Sorce2013-07-021-0/+71
Using getpeercon we can know the elinux context of the process talking to gssproxy. Use this information as an optional additional filter to match processes to service definitions. If a selinux_context option with a full user;role;type context is specified into a service section, then the connecting process must also be running under the specified selinux context in order to be allowed to connect. Signed-off-by: Simo Sorce <simo@redhat.com> Reviewed-by: Günther Deschner <gdeschner@redhat.com>