mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2026-09-03 20:52:56 -05:00
Rob Crittenden
7c2eb48850
The user_u context in the default list was broader than is actually configured by default on systems. https://fedorahosted.org/freeipa/ticket/3224
6 lines
244 B
Plaintext
6 lines
244 B
Plaintext
dn: cn=ipaConfig,cn=etc,$SUFFIX
|
|
add:ipaSELinuxUserMapOrder: guest_u:s0$$xguest_u:s0$$user_u:s0$$staff_u:s0-s0:c0.c1023$$unconfined_u:s0-s0:c0.c1023
|
|
add:ipaSELinuxUserMapDefault: unconfined_u:s0-s0:c0.c1023
|
|
|
|
add:ipaUserObjectClasses: ipasshuser
|