2 Commits

Author	SHA1	Message	Date
Rob Crittenden	dbd87af80b	Fix deletion of HBAC Rules when there are SELinux user maps defined ... When deleting an HBAC rule we need to ensure that an SELinux user map isn't pointing at it. We need to take what is the cn of the HBAC rule and see if that rule exists, then return the dn to that rule. The search was not being done properly and wasn't enforcing uniqueness. It could have returned partial matches as well (so tests for the search test). https://fedorahosted.org/freeipa/ticket/2269	2012-01-24 21:09:09 -05:00
Rob Crittenden	55512dc938	Add SELinux user mapping framework. ... This will allow one to define what SELinux context a given user gets on a given machine. A rule can contain a set of users and hosts or it can point to an existing HBAC rule that defines them. https://fedorahosted.org/freeipa/ticket/755	2011-12-09 16:46:25 +02:00