diff options
| author | Jakub Hrozek <jhrozek@redhat.com> | 2014-10-15 15:58:58 +0200 |
|---|---|---|
| committer | Jakub Hrozek <jhrozek@redhat.com> | 2014-10-22 15:44:23 +0200 |
| commit | 19e9c1c1a21790974400db9349637788727b6564 (patch) | |
| tree | 6d284f2b8d6cf2f0fc488676bd6cdb923bb668b7 /src/providers/dp_backend.h | |
| parent | aa871e019f00493dfa53b48f906132bf94eeae9f (diff) | |
| download | sssd-19e9c1c1a21790974400db9349637788727b6564.tar.gz sssd-19e9c1c1a21790974400db9349637788727b6564.tar.xz sssd-19e9c1c1a21790974400db9349637788727b6564.zip | |
BE: Own the sbus socket as the SSSD user
In some cases, the back end might still be running as root, but the
responder would be running unprivileged. In this case, we need to allow
connecting from the SSSD user ID.
Reviewed-by: Pavel Reichl <preichl@redhat.com>
Reviewed-by: Simo Sorce <simo@redhat.com>
Diffstat (limited to 'src/providers/dp_backend.h')
| -rw-r--r-- | src/providers/dp_backend.h | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/src/providers/dp_backend.h b/src/providers/dp_backend.h index 075681ff9..e4213b44b 100644 --- a/src/providers/dp_backend.h +++ b/src/providers/dp_backend.h @@ -116,6 +116,8 @@ struct be_ctx { struct sss_domain_info *domain; const char *identity; const char *conf_path; + uid_t uid; + gid_t gid; struct be_failover_ctx *be_fo; struct be_resolv_ctx *be_res; |