sssd.git/contrib, branch nonroot

BUILD: Install krb5_child as suid if running under non-privileged user

2014-11-18T19:33:11+00:00

If sssd_be is running unprivileged, then krb5_child must be setuid to be
able to access the keytab and become arbitrary user.

Related:
https://fedorahosted.org/sssd/ticket/2370

Reviewed-by: Sumit Bose 
Reviewed-by: Lukáš Slebodník

CI: Build sssd on debian with samba support

2014-11-11T11:49:46+00:00

Missing dependency, libini_config >= 1.1 is in debian testing
for some time.

Reviewed-by: Michal Židek

IPA: Move setting the SELinux context to a child process

2014-11-05T18:55:09+00:00

In order for the sssd_be process to run as unprivileged user, we need to
move the semanage processing to a process that runs as the root user
using setuid privileges.

Reviewed-by: Michal Židek

BUILD: Install ldap_child and as setuid if running under non-privileged user

2014-11-05T18:54:46+00:00

The ldap_child permissions should be 4750, owned by root.sssd,
to make sure only root and sssd can execute the child and if executed by
sssd, the child will run as root.

Reviewed-by: Michal Židek

SPEC: Print testsuite log for failed test

2014-10-22T14:35:41+00:00

Starting from Automake 1.13, the parallel testsuite harness has been made
the default one; this harness is quite silent.

VERBOSE=yes will displays the logs of the non-passed tests (i.e., only
of the failed or skipped ones, or of the ones that passed unexpectedly).

Reviewed-by: Jakub Hrozek

RPM: Change file ownership to sssd.sssd

2014-10-22T13:44:11+00:00

Adds a private SSSD user in the %pre section of SSSD specfile. Also
changes the ownership of SSSD private directories to sssd.sssd.

Does not change the configure time default, so SSSD will still run as
root. The file and directory ownership does not widen, because the
directories are still only accessible by the private user (whose shell
is /sbin/nologin) and of course the root user.

Reviewed-by: Pavel Reichl 
Reviewed-by: Simo Sorce

CI: Remove Clang analyzer

2014-10-22T10:55:26+00:00

Remove Clang analyzer run from contrib/ci/run as it takes a long time
(5-8 minutes) and its results are unused.

Reviewed-by: Jakub Hrozek

RPM: Package the libsss_semanage.so library

2014-10-20T20:34:15+00:00

Reviewed-by: Lukáš Slebodník

TESTS: Add a test to change user IDs

2014-10-10T11:56:08+00:00

Adds a unit test using the nss_wrapper and uid_wrapper libraries that
exercises the ability to become another user.

Reviewed-by: Lukáš Slebodník

CI: Don't say Valgrind is ignored in README.md

2014-09-25T08:03:37+00:00

Reviewed-by: Michal Židek