freeipa/ipaplatform/base
Christian Heimes 165a941109
Don't configure KEYRING ccache in containers
Kernel keyrings are not namespaced yet. Keyrings can leak into other
containers. Therefore keyrings should not be used in containerized
environment.

Don't configure Kerberos to use KEYRING ccache backen when a container
environment is detected by systemd-detect-virt --container.

Fixes: https://pagure.io/freeipa/issue/7807
Signed-off-by: Christian Heimes <cheimes@redhat.com>
Reviewed-By: Rob Crittenden <rcritten@redhat.com>
Reviewed-By: Tibor Dudlak <tdudlak@redhat.com>
2019-01-18 11:33:11 +01:00
..
__init__.py ipaplatform: Create separate module for platform files 2014-06-16 19:48:17 +02:00
constants.py ipa-replica-install --setup-adtrust: check for package ipa-server-trust-ad 2018-10-24 14:20:29 +02:00
paths.py Don't configure KEYRING ccache in containers 2019-01-18 11:33:11 +01:00
services.py ipa-client-automount: use nfs-utils unit 2018-12-14 10:15:04 +01:00
tasks.py Don't configure KEYRING ccache in containers 2019-01-18 11:33:11 +01:00