diff options
| author | Jakub Hrozek <jhrozek@redhat.com> | 2014-10-20 23:16:40 +0200 |
|---|---|---|
| committer | Jakub Hrozek <jhrozek@redhat.com> | 2014-11-05 19:55:09 +0100 |
| commit | f3a25949de81f80c136bb073e4a8f504b080c20c (patch) | |
| tree | 69523a939b65b371d7a95e16d1f69e237c77f048 /src/util | |
| parent | 77b13371c87702aee3f858f6b2b73826cf5a01bd (diff) | |
| download | sssd-f3a25949de81f80c136bb073e4a8f504b080c20c.tar.gz sssd-f3a25949de81f80c136bb073e4a8f504b080c20c.tar.xz sssd-f3a25949de81f80c136bb073e4a8f504b080c20c.zip | |
IPA: Move setting the SELinux context to a child process
In order for the sssd_be process to run as unprivileged user, we need to
move the semanage processing to a process that runs as the root user
using setuid privileges.
Reviewed-by: Michal Židek <mzidek@redhat.com>
Diffstat (limited to 'src/util')
| -rw-r--r-- | src/util/util_errors.c | 1 | ||||
| -rw-r--r-- | src/util/util_errors.h | 1 |
2 files changed, 2 insertions, 0 deletions
diff --git a/src/util/util_errors.c b/src/util/util_errors.c index 5b36780ff..d5da64622 100644 --- a/src/util/util_errors.c +++ b/src/util/util_errors.c @@ -62,6 +62,7 @@ struct err_string error_to_str[] = { { "Bus method not supported" }, /* ERR_SBUS_NOSUP */ { "Cannot connect to system bus" }, /* ERR_NO_SYSBUS */ { "LDAP search returned a referral" }, /* ERR_REFERRAL */ + { "Error setting SELinux user context" }, /* ERR_SELINUX_CONTEXT */ }; diff --git a/src/util/util_errors.h b/src/util/util_errors.h index e040ba903..2bc576605 100644 --- a/src/util/util_errors.h +++ b/src/util/util_errors.h @@ -84,6 +84,7 @@ enum sssd_errors { ERR_SBUS_NOSUP, ERR_NO_SYSBUS, ERR_REFERRAL, + ERR_SELINUX_CONTEXT, ERR_LAST /* ALWAYS LAST */ }; |