Christian Heimes beffa7bcda Move Custodia secrets handler to scripts ... Implement the import and export handlers for Custodia keys as external scripts. It's a prerequisite to drop DAC override permission and proper SELinux rules for ipa-custodia. Except for DMLDAP, handlers no longer run as root but as handler specific users with reduced privileges. The Dogtag-related handlers run as pkiuser, which also help with HSM support. The export and import handles are designed to be executed by sudo, too. In the future, ipa-custodia could be executed as an unprivileged process that runs the minimal helper scripts with higher privileges. Fixes: https://pagure.io/freeipa/issue/6888 Signed-off-by: Christian Heimes <cheimes@redhat.com> Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>		2019-04-26 12:09:22 +02:00
..
__init__.py	ipaplatform: Create separate module for platform files	2014-06-16 19:48:17 +02:00
constants.py	ipa-replica-install --setup-adtrust: check for package ipa-server-trust-ad	2018-10-24 14:20:29 +02:00
paths.py	Move Custodia secrets handler to scripts	2019-04-26 12:09:22 +02:00
services.py	ipaplatform: add more services	2019-04-26 10:25:00 +02:00
tasks.py	Refactor tasks to include is_selinux_enabled()	2019-04-26 09:50:23 +02:00