Re: [CentOS] selinux prohibiting sssd usage

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1

On 08/10/2011 02:24 PM, Paul Heinlein wrote:

On Wed, 10 Aug 2011, Daniel J Walsh wrote:

...

I am adding the allow rule to allow http_git_script_t to resolve usernames to Fedora and Rhel policies.

Thanks, Dan! I'm a big fan of the work you've done integrating RHEL and SELinux, and improving SELinux in general.

Do you have a diff or policy fragment I can use until your changes appear in CentOS?

auth_use_nsswitch(http_git_script_t)

Is what I am adding to 6.2 policy.

This will show up in selinux-policy-3.7.19-107.el6 when we build it later this week.

You can always grab the latest policy for the upcoming release at

http://people.redhat.com/dwalsh/SELinux/RHEL6

selinux-policy-3.7.19-106.el6 is out there now.