IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-02-25 18:55:28 -06:00
Code Issues Packages Projects Releases Wiki Activity

Add SELinux policy so kadmind can read the crackdb dictionary

Browse Source 
https://pagure.io/freeipa/issue/6964
https://pagure.io/freeipa/issue/5948
https://pagure.io/freeipa/issue/2445
https://pagure.io/freeipa/issue/298

Signed-off-by: Rob Crittenden <rcritten@redhat.com>
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
Reviewed-By: Christian Heimes <cheimes@redhat.com>
This commit is contained in:
Rob Crittenden
2020-09-27 18:02:54 -04:00
parent fe44835970
commit 68aa7c0554
1 changed files with 18 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
selinux/ipa.te
View File

@@ -115,6 +115,24 @@ optional_policy(`
sssd_stream_connect(ipa_otpd_t)
')
########################################
#
# password policy local policy
#
optional_policy(`
gen_require(`
type kadmind_t;
type crack_db_t;
class file getattr;
class file open;
class file read;
class dir search;
')
allow kadmind_t crack_db_t:file { getattr open read };
allow kadmind_t crack_db_t:dir search;
')
########################################
#
# ipa-helper local policy