URL:
https://github.com/SSSD/sssd/pull/342
Title: #342: SELINUX: Use getseuserbyname to get IPA seuser
bachradsusi commented:
"""
When you need to manage - add/remove - SELinux login mappings you need to use libsemanage
as you do now. There's no such interface in libselinux.
As for the `getseuserbyname()` part, it looks good to me.
If you wanted to use same library for both `get_user` and `del_user` the original
`get_seuser` could be enhanced to use `__default__` user when there's no existing
SELinux login mapping. But I would consider this to be more error prone than
`getseuserbyname()`
"""
See the full comment at
https://github.com/SSSD/sssd/pull/342#issuecomment-327203254