IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-02-25 18:55:28 -06:00
Code Issues Packages Projects Releases Wiki Activity

Add ipa_pki_retrieve_key_exec() interface

Browse Source 
The ipa_pki_retrieve_key_exec() interface is needed to allow other
domains execute ipa-pki-retrieve-key.

Related: https://pagure.io/freeipa/issue/8488
Signed-off-by: Zdenek Pytela <zpytela@redhat.com>
Reviewed-By: Christian Heimes <cheimes@redhat.com>
This commit is contained in:
Zdenek Pytela 2020-09-23 07:45:37 +02:00 committed by Christian Heimes
parent 644bd0e46b
commit 7651d335b3
1 changed files with 19 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
selinux/ipa.if
View File

@ -328,6 +328,25 @@ interface(`ipa_custodia_domtrans',`
domtrans_pattern($1, ipa_custodia_exec_t, ipa_custodia_t)
')
######################################
## <summary>
## Execute ipa-pki-retrieve-key in the caller domain.
## </summary>
## <param name="domain">
## <summary>
## Domain allowed access.
## </summary>
## </param>
#
interface(`ipa_pki_retrieve_key_exec',`
gen_require(`
type ipa_pki_retrieve_key_exec_t;
')
corecmd_search_bin($1)
can_exec($1, ipa_pki_retrieve_key_exec_t)
')
######################################
## <summary>
## Execute ipa_custodia in the caller domain.