diff options
| author | Jakub Hrozek <jhrozek@redhat.com> | 2015-01-20 18:06:49 +0100 |
|---|---|---|
| committer | Jakub Hrozek <jhrozek@redhat.com> | 2015-01-21 11:25:49 +0100 |
| commit | 858e750c3d4fe54e50616a1ed1e101469503c070 (patch) | |
| tree | bcedf85c2277380983eb21251f375adea06d7f5f /src/providers/ipa/ipa_s2n_exop.c | |
| parent | 7543052f562f157f7b17fdc46a6777d80c0cb3bd (diff) | |
| download | sssd-858e750c3d4fe54e50616a1ed1e101469503c070.tar.gz sssd-858e750c3d4fe54e50616a1ed1e101469503c070.tar.xz sssd-858e750c3d4fe54e50616a1ed1e101469503c070.zip | |
Open the PAC socket from krb5_child before dropping root
The PAC responder by default allows only connections from the root user.
This patch opens the socket to the PAC responder before the krb5_child
drops privileges so the connection seemingly comes from root.
https://fedorahosted.org/sssd/ticket/2559
Reviewed-by: Sumit Bose <sbose@redhat.com>
Diffstat (limited to 'src/providers/ipa/ipa_s2n_exop.c')
0 files changed, 0 insertions, 0 deletions