From f3a25949de81f80c136bb073e4a8f504b080c20c Mon Sep 17 00:00:00 2001 From: Jakub Hrozek Date: Mon, 20 Oct 2014 23:16:40 +0200 Subject: IPA: Move setting the SELinux context to a child process MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit In order for the sssd_be process to run as unprivileged user, we need to move the semanage processing to a process that runs as the root user using setuid privileges. Reviewed-by: Michal Židek --- src/util/util_errors.h | 1 + 1 file changed, 1 insertion(+) (limited to 'src/util/util_errors.h') diff --git a/src/util/util_errors.h b/src/util/util_errors.h index e040ba90..2bc57660 100644 --- a/src/util/util_errors.h +++ b/src/util/util_errors.h @@ -84,6 +84,7 @@ enum sssd_errors { ERR_SBUS_NOSUP, ERR_NO_SYSBUS, ERR_REFERRAL, + ERR_SELINUX_CONTEXT, ERR_LAST /* ALWAYS LAST */ }; -- cgit