IntenseWebs/freeipa
3
0 Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2026-11-03 04:40:31 -06:00
Code Issues Packages Projects Releases Wiki Activity

Fix various OpenDNSSEC 2.1 issues

Browse Source 
Require OpenDNSSEC 2.1.6-5 with fix for RHBZ#1825812 (DAC override AVC)

Allow ipa-dnskeysyncd to connect to enforcer.sock (ipa_dnskey_t write
opendnssec_var_run_t and connectto opendnssec_t). The
opendnssec_stream_connect interface is available since 2016.

Change the owner of the ipa-ods-exporter socket to ODS_USER:ODS_GROUP.
The ipa-ods-exporter service already runs as ODS_USER.

Fixes: https://pagure.io/freeipa/issue/8283
Signed-off-by: Christian Heimes <cheimes@redhat.com>
Reviewed-By: Florence Blanc-Renaud <frenaud@redhat.com>
This commit is contained in:
Christian Heimes committed 2020-04-21 21:37:06 +02:00
1 parent 10aaef031b
commit e881e35783
6 files changed
+16
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

selinux/ipa.te
+1
View File
@@ -253,6 +253,7 @@ optional_policy(`
opendnssec_manage_config(ipa_dnskey_t)
opendnssec_manage_var_files(ipa_dnskey_t)
opendnssec_filetrans_etc_content(ipa_dnskey_t)
opendnssec_stream_connect(ipa_dnskey_t)
')
########################################