On Fri, Jul 20, 2012 at 05:27:44PM +0200, Jan Zelený wrote:
> Oh right, it's and HBAC attribute..
>
> Can't you just include ipa_hbac_private.h, then?
I didn't exactly like that solution either so I moved those two constants to
ipa_hbac.h which is supposed to be a public HBAC interface. The "right
solution" would be to construct a map for HBAC rules, I know we discussed this
with Stephen several months back but we never really got to do that.
ipa_hbac.h is a public header of libipa_hbac, included in
libipa_hbac-devel. The attribute names don't have to be in the public
interface, I think that including the ipa_hbac_private.h header is just
fine.