From f3a25949de81f80c136bb073e4a8f504b080c20c Mon Sep 17 00:00:00 2001 From: Jakub Hrozek Date: Mon, 20 Oct 2014 23:16:40 +0200 Subject: IPA: Move setting the SELinux context to a child process MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit In order for the sssd_be process to run as unprivileged user, we need to move the semanage processing to a process that runs as the root user using setuid privileges. Reviewed-by: Michal Židek --- src/util/util_errors.c | 1 + 1 file changed, 1 insertion(+) (limited to 'src/util/util_errors.c') diff --git a/src/util/util_errors.c b/src/util/util_errors.c index 5b36780f..d5da6462 100644 --- a/src/util/util_errors.c +++ b/src/util/util_errors.c @@ -62,6 +62,7 @@ struct err_string error_to_str[] = { { "Bus method not supported" }, /* ERR_SBUS_NOSUP */ { "Cannot connect to system bus" }, /* ERR_NO_SYSBUS */ { "LDAP search returned a referral" }, /* ERR_REFERRAL */ + { "Error setting SELinux user context" }, /* ERR_SELINUX_CONTEXT */ }; -- cgit