sssd.git/src/db/sysdb_selinux.c, branch simo

Add domain argument to sysdb selinux functions

2013-01-11T15:43:14+00:00

Add domain to sysdb_search_user_by_name()

2013-01-11T15:43:10+00:00

Also remove unused sysdb_search_domuser_by_name()

Remove the sysdb_ctx_get_domain() function.

2013-01-11T15:43:09+00:00

We are deprecating sysdb->domain so kill the function that gives access to
this member as we should stop relying on it being available (or correct).

SYSDB: Split a function to read all SELinux maps

2013-01-08T16:14:54+00:00

SELinux: Always use the default if it exists on the server

2012-09-13T16:11:59+00:00

https://fedorahosted.org/sssd/ticket/1513

This is a counterpart of the FreeIPA ticket https://fedorahosted.org/freeipa/ticket/3045

During an e-mail discussion, it was decided that

    * if the default is set in the IPA config object, the SSSD would use
      that default no matter what
    * if the default is not set (aka empty or missing), the SSSD
      would just use the system default and skip creating the login
      file altogether

DB: Always write the SELinux object to sysdb

2012-09-13T16:11:59+00:00

There's no point in checking if the object already exists because we always
wipe the whole sysdb subtree. We were also immediatelly cancelling the
transaction because we'd jump to goto, even though it was with EOK.

Unify usage of sysdb transactions (part 2).

2012-09-04T11:56:32+00:00

Only create the SELinux login file if there are mappings on the server

2012-08-16T11:31:03+00:00

https://fedorahosted.org/sssd/ticket/1455

In case there are no rules on the IPA server, we must simply avoid generating
the login file. That would make us fall back to the system-wide default
defined in /etc/selinux/targeted/seusers.

The IPA default must be only used if there *are* rules on the server,
but none matches.

Fix sysdb_search_selinux_usermap_by_username return value

2012-07-20T18:26:58+00:00

There was a logic bug in sysdb_search_selinux_usermap_by_username that
resulted in returning the value the variable "ret" had after the last
call to sysdb_attrs_get_uint32_t, which in cases the last rule processed
did not have the requested attributes led to using the default user
context.

Fix uninitialized values

2012-07-18T18:07:45+00:00

https://fedorahosted.org/sssd/ticket/1379