IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-02-25 18:55:28 -06:00
Code Issues Packages Projects Releases Wiki Activity
Files
c03b4862b84d52ddc91c5a3fb885b0ebf753d8f2
freeipa/selinux
History
Zdenek Pytela 7651d335b3 Add ipa_pki_retrieve_key_exec() interface 
The ipa_pki_retrieve_key_exec() interface is needed to allow other
domains execute ipa-pki-retrieve-key.

Related: https://pagure.io/freeipa/issue/8488
Signed-off-by: Zdenek Pytela <zpytela@redhat.com>
Reviewed-By: Christian Heimes <cheimes@redhat.com>
2020-09-23 15:23:28 +02:00
..
ipa.fc
SELinux: Add dedicated policy for ipa-pki-retrieve-key
2020-09-22 18:05:38 +02:00
ipa.if
Add ipa_pki_retrieve_key_exec() interface
2020-09-23 15:23:28 +02:00
ipa.te
SELinux: do not double-define node_t and pki_tomcat_cert_t
2020-09-23 14:47:06 +02:00
Makefile.am
Integrate SELinux policy into build system
2020-03-05 09:57:00 +01:00
README.md
Move freeipa-selinux dependency to freeipa-common
2020-03-20 15:18:30 +01:00

README.md

IPA SELinux policy

The ipa SELinux policy is used by IPA client and server. The policy was forked off from Fedora upstream policy at commit b1751347f4af99de8c88630e2f8d0a352d7f5937.

Some file locations are owned by other policies:

  • /var/lib/ipa/pki-ca/publish(/.*)? is owned by Dogtag PKI policy
  • /usr/lib/ipa/certmonger(/.*)? is owned by certmonger policy
  • /var/lib/ipa-client(/.*)? is owned by realmd policy