diff options
| author | Jakub Hrozek <jhrozek@redhat.com> | 2015-01-27 11:12:18 +0100 |
|---|---|---|
| committer | Jakub Hrozek <jhrozek@redhat.com> | 2015-01-27 18:05:51 +0100 |
| commit | 8f78b6442f3176ee43aa06704a3adb9f4ac625d6 (patch) | |
| tree | 25262d91ce9492d06494038df384bb5fd9d79af3 /src/util | |
| parent | 486f0d5227a9b81815aaaf7d9a2c39aafcbfdf6a (diff) | |
| download | sssd-8f78b6442f3176ee43aa06704a3adb9f4ac625d6.tar.gz sssd-8f78b6442f3176ee43aa06704a3adb9f4ac625d6.tar.xz sssd-8f78b6442f3176ee43aa06704a3adb9f4ac625d6.zip | |
SELINUX: Set and reset umask when caling set_seuser from deamon code
https://fedorahosted.org/sssd/ticket/2563
Reviewed-by: Michal Židek <mzidek@redhat.com>
Diffstat (limited to 'src/util')
| -rw-r--r-- | src/util/util.h | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/src/util/util.h b/src/util/util.h index 4ee9bad11..22d6ef0a4 100644 --- a/src/util/util.h +++ b/src/util/util.h @@ -640,6 +640,10 @@ errno_t switch_creds(TALLOC_CTX *mem_ctx, errno_t restore_creds(struct sss_creds *saved_creds); /* from sss_semanage.c */ +/* Please note that libsemange relies on files and directories created with + * certain permissions. Therefore the caller should make sure the umask is + * not too restricted (especially when called from the daemon code). + */ int set_seuser(const char *login_name, const char *seuser_name, const char *mlsrange); int del_seuser(const char *login_name); |