IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-01-22 14:23:19 -06:00
Code Issues Packages Projects Releases Wiki Activity

Grant /usr/sbin/ipa_kpasswd "name_bind" access.

Browse Source 
Requires selinux-policy-3.6.32-123 on F12
Requires selinux-policy-3.7.19-40 on F13

ticket 73
This commit is contained in:
Rob Crittenden 2010-10-14 14:42:30 -04:00
parent 9726941e3d
commit b270542863
2 changed files with 11 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
ipa.spec.in
View File

@ -85,7 +85,9 @@ Requires: python-krbV
Requires: acl Requires: acl
Requires: python-pyasn1 >= 0.0.9a Requires: python-pyasn1 >= 0.0.9a
Requires: libcap Requires: libcap
%if 0%{?fedora} >= 12 || 0%{?rhel} >= 6 %{?fc12:Requires: selinux-policy >= 3.6.32-123}
%{?fc13:Requires: selinux-policy >= 3.7.19-40}
%if 0%{?fedora} >= 14 || 0%{?rhel} >= 6
Requires: selinux-policy Requires: selinux-policy
%endif %endif
Requires(post): selinux-policy-base Requires(post): selinux-policy-base

8
selinux/ipa_kpasswd/ipa_kpasswd.te
View File

@ -69,3 +69,11 @@ require {
}; };
allow ipa_kpasswd_t krb5kdc_conf_t:dir search_dir_perms; allow ipa_kpasswd_t krb5kdc_conf_t:dir search_dir_perms;
optional_policy(`
gen_require(`
type kerberos_password_port_t;
')
corenet_tcp_bind_kerberos_password_port(ipa_kpasswd_t)
')