Re: [SSSD] [PATCH] IPA: Use the correct domain when processing SELinux rules
On Thu, Mar 06, 2014 at 05:27:22PM +0100, Michal Židek wrote:
On 03/05/2014 09:58 PM, Jakub Hrozek wrote:
>We blindly used the user's domain for everything. That wrong in case the
>user comes from a subdomain. We should use the IPA domain for accessing
>the SELinux rules and host data and the user domain only for the user.
>
>https://fedorahosted.org/sssd/ticket/2270
>
The code looks good. I need to leave the office soon, so I will do the
testing tomorrow.
Michal
Bump, this patch is expected by downstream in a couple of days. I'll be
glad for any review comments, but because I won't be available tomorrow,
chances are I won't have the time to respin the patch until Tuesday if
nacked.