mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2025-02-25 18:55:28 -06:00
Grant /usr/sbin/ipa_kpasswd "name_bind" access.
Requires selinux-policy-3.6.32-123 on F12 Requires selinux-policy-3.7.19-40 on F13 ticket 73
This commit is contained in:
@@ -69,3 +69,11 @@ require {
|
||||
};
|
||||
|
||||
allow ipa_kpasswd_t krb5kdc_conf_t:dir search_dir_perms;
|
||||
|
||||
optional_policy(`
|
||||
gen_require(`
|
||||
type kerberos_password_port_t;
|
||||
')
|
||||
corenet_tcp_bind_kerberos_password_port(ipa_kpasswd_t)
|
||||
')
|
||||
|
||||
|
||||
Reference in New Issue
Block a user