Christian Heimes 2ef6e14c5a Create systemd-user HBAC service and rule ...

authselect changed pam_systemd session from optional to required. When
the HBAC rule allow_all is disabled and replaced with more fine grained
rules, loginsi now to fail, because systemd's user@.service is able to
create a systemd session.

Add systemd-user HBAC service and a HBAC rule that allows systemd-user
to run on all hosts for all users by default. ipa-server-upgrade creates
the service and rule, too. In case the service already exists, no
attempt is made to create the rule. This allows admins to delete the
rule permanently.

See: https://bugzilla.redhat.com/show_bug.cgi?id=1643928
Fixes: https://pagure.io/freeipa/issue/7831
Signed-off-by: Christian Heimes <cheimes@redhat.com>
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>

2019-01-11 16:45:05 +01:00

..

man

Replace ntpd with chronyd in installation

2018-04-09 11:00:02 -04:00

prci_definitions

Fix test_advise in nightly runs

2018-12-14 13:44:28 +01:00

pytest_ipa

Always collect test logs

2018-12-13 16:55:41 +01:00

test_cmdline

Address inconsistent-return-statements

2018-11-13 13:37:58 +01:00

test_install

ipa-client-install: Update how comments are added by ipachangeconf

2018-07-05 19:42:43 +02:00

test_integration

Create systemd-user HBAC service and rule

2019-01-11 16:45:05 +01:00

test_ipaclient

Py3: Remove subclassing from object

2018-09-27 11:49:04 +02:00

test_ipalib

Check pager's executable before subprocess.Popen

2018-12-07 14:06:29 +01:00

test_ipaplatform

Silence comparison-with-itself in tests

2018-11-13 13:37:58 +01:00

test_ipapython

Silence comparison-with-itself in tests

2018-11-13 13:37:58 +01:00

test_ipaserver

Unify and simplify LDAP service discovery

2018-11-21 08:57:08 +01:00

test_webui

WebUI: Temporary fix for UnexpectedAlertPresentException

2018-12-13 21:14:57 +01:00

test_xmlrpc

Handle service_del with bad service name

2018-12-11 12:14:32 +01:00

__init__.py

Make an ipa-tests package

2013-06-17 19:22:50 +02:00

conftest.py

Make conftest compatible with pytest 4.x

2019-01-08 17:25:56 +01:00

create_external_ca.py

Py3: Replace six.text_type with str

2018-09-27 16:11:18 +02:00

data.py

Fix more bytes/unicode issues

2015-10-22 18:34:46 +02:00

i18n.py

Sprinkle raw strings across the code base

2018-09-27 10:23:03 +02:00

ipa-run-tests

Fix compatibility with latest pytest

2018-03-23 13:08:39 +01:00

ipa-test-config

Rename pytest_plugins to ipatests.pytest_ipa

2018-08-02 17:07:43 +02:00

ipa-test-task

Rename pytest_plugins to ipatests.pytest_ipa

2018-08-02 17:07:43 +02:00

Makefile.am

Build: fix distribution of static files for web UI

2016-11-09 13:08:32 +01:00

setup.cfg

Port all setup.py to setuptools

2016-10-20 18:43:37 +02:00

setup.py

Rename pytest_plugins to ipatests.pytest_ipa

2018-08-02 17:07:43 +02:00

test_util.py

Py3: Remove subclassing from object

2018-09-27 11:49:04 +02:00

util.py

Fix Module 'pytest' has no 'config' member

2018-11-13 13:37:58 +01:00