Grant /usr/sbin/ipa_kpasswd "name_bind" access.

Requires selinux-policy-3.6.32-123 on F12
Requires selinux-policy-3.7.19-40 on F13

ticket 73
This commit is contained in:
Rob Crittenden
2010-10-14 14:42:30 -04:00
parent 9726941e3d
commit b270542863
2 changed files with 11 additions and 1 deletions

View File

@@ -69,3 +69,11 @@ require {
};
allow ipa_kpasswd_t krb5kdc_conf_t:dir search_dir_perms;
optional_policy(`
gen_require(`
type kerberos_password_port_t;
')
corenet_tcp_bind_kerberos_password_port(ipa_kpasswd_t)
')