diff options
| author | Jakub Hrozek <jhrozek@redhat.com> | 2014-10-24 22:44:17 +0200 |
|---|---|---|
| committer | Jakub Hrozek <jhrozek@redhat.com> | 2014-11-18 20:33:11 +0100 |
| commit | a60f4bb6b321298eb4d1c1c33d1897049a83d357 (patch) | |
| tree | fff0154ba9fed8ae3bc3feca4351c12e59df797e /src/providers/krb5/krb5_child_handler.c | |
| parent | 38429c99bf5af14c2d6bae6ddcf70974fdd103cc (diff) | |
| download | sssd-a60f4bb6b321298eb4d1c1c33d1897049a83d357.tar.gz sssd-a60f4bb6b321298eb4d1c1c33d1897049a83d357.tar.xz sssd-a60f4bb6b321298eb4d1c1c33d1897049a83d357.zip | |
BUILD: Install krb5_child as suid if running under non-privileged user
If sssd_be is running unprivileged, then krb5_child must be setuid to be
able to access the keytab and become arbitrary user.
Related:
https://fedorahosted.org/sssd/ticket/2370
Reviewed-by: Sumit Bose <sbose@redhat.com>
Reviewed-by: Lukáš Slebodník <lslebodn@redhat.com>
Diffstat (limited to 'src/providers/krb5/krb5_child_handler.c')
0 files changed, 0 insertions, 0 deletions