From 9c124af8868a7d3908c03ec369e28daef17d5f12 Mon Sep 17 00:00:00 2001 From: Jakub Hrozek Date: Tue, 30 Mar 2010 15:26:58 +0200 Subject: SELinux login management Adds a new option -Z to sss_useradd and sss_usermod. This option allows user to specify the SELinux login context for the user. On deleting the user with sss_userdel, the login mapping is deleted, so subsequent adding of the same user would result in the default login context unless -Z is specified again. MLS security is not supported as of this patch. --- src/external/selinux.m4 | 12 ++++++++++++ 1 file changed, 12 insertions(+) (limited to 'src/external') diff --git a/src/external/selinux.m4 b/src/external/selinux.m4 index 0c5d5294..d1b961a4 100644 --- a/src/external/selinux.m4 +++ b/src/external/selinux.m4 @@ -11,3 +11,15 @@ AC_DEFUN([AM_CHECK_SELINUX], AC_SUBST(SELINUX_LIBS) ]) +dnl A macro to check the availability of SELinux management library +AC_DEFUN([AM_CHECK_SEMANAGE], +[ + AC_CHECK_HEADERS(semanage/semanage.h, + [AC_CHECK_LIB(semanage, semanage_handle_create, + [SEMANAGE_LIBS="-lsemanage"], + [AC_MSG_ERROR([libsemanage is missing])] + ) + ], + [AC_MSG_ERROR([libsemanage is missing])]) + AC_SUBST(SEMANAGE_LIBS) +]) -- cgit