From 56beef9f775a28973106d074b191c48ab99d179d Mon Sep 17 00:00:00 2001 From: Rob Crittenden Date: Thu, 1 Nov 2012 10:13:01 -0400 Subject: Set MLS/MCS for user_u context to what will be on remote systems. The user_u context in the default list was broader than is actually configured by default on systems. https://fedorahosted.org/freeipa/ticket/3224 --- install/share/bootstrap-template.ldif | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'install/share') diff --git a/install/share/bootstrap-template.ldif b/install/share/bootstrap-template.ldif index a17f2518..bf7de348 100644 --- a/install/share/bootstrap-template.ldif +++ b/install/share/bootstrap-template.ldif @@ -381,7 +381,7 @@ ipaUserObjectClasses: ipasshuser ipaDefaultEmailDomain: $DOMAIN ipaMigrationEnabled: FALSE ipaConfigString: AllowNThash -ipaSELinuxUserMapOrder: guest_u:s0$$xguest_u:s0$$user_u:s0-s0:c0.c1023$$staff_u:s0-s0:c0.c1023$$unconfined_u:s0-s0:c0.c1023 +ipaSELinuxUserMapOrder: guest_u:s0$$xguest_u:s0$$user_u:s0$$staff_u:s0-s0:c0.c1023$$unconfined_u:s0-s0:c0.c1023 ipaSELinuxUserMapDefault: unconfined_u:s0-s0:c0.c1023 dn: cn=cosTemplates,cn=accounts,$SUFFIX -- cgit