summaryrefslogtreecommitdiffstats
path: root/src/providers/ad
diff options
context:
space:
mode:
authorPavel Reichl <preichl@redhat.com>2015-01-13 17:43:30 -0500
committerJakub Hrozek <jhrozek@redhat.com>2015-01-15 10:33:31 +0100
commitb49c6abe12721ee8442be1c1bd6c15443b518ca2 (patch)
tree39f95a4bae7a1c3239229b6cd7b9bcd23f3601b1 /src/providers/ad
parentf3d91181d4ee9da3f8bbf4ddf8782951c0ae46c1 (diff)
downloadsssd-b49c6abe12721ee8442be1c1bd6c15443b518ca2.tar.gz
sssd-b49c6abe12721ee8442be1c1bd6c15443b518ca2.tar.xz
sssd-b49c6abe12721ee8442be1c1bd6c15443b518ca2.zip
GPO: add systemd-user to gpo default permit list
Resolves: https://fedorahosted.org/sssd/ticket/2556 Reviewed-by: Stephen Gallagher <sgallagh@redhat.com>
Diffstat (limited to 'src/providers/ad')
-rw-r--r--src/providers/ad/ad_gpo.c4
1 files changed, 3 insertions, 1 deletions
diff --git a/src/providers/ad/ad_gpo.c b/src/providers/ad/ad_gpo.c
index 1ab40af0a..a9879b41b 100644
--- a/src/providers/ad/ad_gpo.c
+++ b/src/providers/ad/ad_gpo.c
@@ -187,6 +187,7 @@ int ad_gpo_process_cse_recv(struct tevent_req *req);
#define GPO_CROND "crond"
#define GPO_SUDO "sudo"
#define GPO_SUDO_I "sudo-i"
+#define GPO_SYSTEMD_USER "systemd-user"
struct gpo_map_option_entry {
enum gpo_map_type gpo_map_type;
@@ -203,7 +204,8 @@ const char *gpo_map_remote_interactive_defaults[] = {GPO_SSHD, NULL};
const char *gpo_map_network_defaults[] = {GPO_FTP, GPO_SAMBA, NULL};
const char *gpo_map_batch_defaults[] = {GPO_CROND, NULL};
const char *gpo_map_service_defaults[] = {NULL};
-const char *gpo_map_permit_defaults[] = {GPO_SUDO, GPO_SUDO_I, NULL};
+const char *gpo_map_permit_defaults[] = {GPO_SUDO, GPO_SUDO_I,
+ GPO_SYSTEMD_USER, NULL};
const char *gpo_map_deny_defaults[] = {NULL};
struct gpo_map_option_entry gpo_map_option_entries[] = {