diff options
author | Jakub Hrozek <jhrozek@redhat.com> | 2015-03-16 11:12:25 +0100 |
---|---|---|
committer | Jakub Hrozek <jhrozek@redhat.com> | 2015-03-24 21:03:35 +0100 |
commit | c41ae115bfa808d04e729dcbd759d8aae8387ce7 (patch) | |
tree | a58b939470d95c20dca22112342e7d7b5a812237 /src/providers/ipa/ipa_selinux.c | |
parent | 64d8e2df816323a004bf6e7e9d05ba373b9e033d (diff) | |
download | sssd-c41ae115bfa808d04e729dcbd759d8aae8387ce7.tar.gz sssd-c41ae115bfa808d04e729dcbd759d8aae8387ce7.tar.xz sssd-c41ae115bfa808d04e729dcbd759d8aae8387ce7.zip |
IPA: Only treat malformed HBAC rules as fatal if deny rules are enabled
https://fedorahosted.org/sssd/ticket/2603
If deny rules are not in effect, we can skip malformed HBAC rules
because at worst we will deny access. If deny rules are in effect, we
need to error out to be on the safe side and avoid skipping a deny rule.
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Diffstat (limited to 'src/providers/ipa/ipa_selinux.c')
0 files changed, 0 insertions, 0 deletions