[refpolicy] admin_usermanage.patch

[refpolicy] admin_usermanage.patch

[Daniel J Walsh]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

http://people.fedoraproject.org/~dwalsh/SELinux/F11/admin_usermanage.patch


Multiple fixes to passwd and usermanage.

smbd_t sends sigkill to passwd_t

Any confined domain that transitions to another confined domain and can
use run from a user role needs to add the run domain_run command for
other domains, in it's _run function to set up RBAC correctly.

Samba domain controller uses useradd
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iEYEARECAAYFAkmv92MACgkQrlYvE4MpobM2+ACaAhkDLeQc8Hi3kX/STjDGl7E1
gOEAoOlSjBRJcuSFr5lFmAolzc+ltUnA
=quyS
-----END PGP SIGNATURE-----

[refpolicy] admin_usermanage.patch

[Christopher J. PeBenito]

On Thu, 2009-03-05 at 12:01 -0400, Daniel J Walsh wrote:
> http://people.fedoraproject.org/~dwalsh/SELinux/F11/admin_usermanage.patch
> 
> 
> Multiple fixes to passwd and usermanage.
> 
> smbd_t sends sigkill to passwd_t
> 
> Any confined domain that transitions to another confined domain and
> can
> use run from a user role needs to add the run domain_run command for
> other domains, in it's _run function to set up RBAC correctly.
> 
> Samba domain controller uses useradd

Merged.

-- 
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150

[refpolicy] admin_usermanage.patch

[Christopher J. PeBenito]

On 06/02/10 15:59, Daniel J Walsh wrote:
> Broken leaks of sockets
>
> useradd runs semanage for -Z.
>
> passwd_t needs sys_nice
>
> useradd run within a samba_controler needs to append to the samba log.

Merged.

-- 
Chris PeBenito
Tresys Technology, LLC
www.tresys.com | oss.tresys.com

[refpolicy] admin_usermanage.patch

[Daniel J Walsh]

http://people.fedoraproject.org/~dwalsh/SELinux/F14/admin_usermanage.patch

Broken leaks of sockets

useradd runs semanage for -Z.

passwd_t needs sys_nice

useradd run within a samba_controler needs to append to the samba log.

[refpolicy] admin_usermanage.patch

[Daniel J Walsh]

http://people.fedoraproject.org/~dwalsh/SELinux/F12/admin_usermanage.patch

Lots of fixes for usermanagement mainly around implementing /etc/skel routines.

[refpolicy] admin_usermanage.patch

[Christopher J. PeBenito]

On Fri, 2009-08-28 at 15:52 -0400, Daniel J Walsh wrote:
> http://people.fedoraproject.org/~dwalsh/SELinux/F12/admin_usermanage.patch
> 
> useradd transitions to semanage
> 
> Needs to be able to create any file in the users homedir
> 
> groupadd reads /usr/tmp for some reason.
> 
> useradd and groupadd are not running checkpwd?

Some of your confusion is due to this patch reversing commit
02e594d5dcfa7a91a62fa56c81b510c19bde618a

> When samba_domain_controller is running useradd output is appended to
> samba log files.



-- 
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150

[refpolicy] admin_usermanage.patch

[Daniel J Walsh]

http://people.fedoraproject.org/~dwalsh/SELinux/F12/admin_usermanage.patch

useradd transitions to semanage

Needs to be able to create any file in the users homedir

groupadd reads /usr/tmp for some reason.

useradd and groupadd are not running checkpwd?

When samba_domain_controller is running useradd output is appended to samba log files.

[refpolicy] admin_usermanage.patch

[Daniel J Walsh]

http://people.fedoraproject.org/~dwalsh/SELinux/F11/admin_usermanage.patch

If you turn on samba_domain_controller useradd stdout is set to a samba 
log file.

[refpolicy] admin_usermanage.patch

[Daniel J Walsh]

http://people.fedoraproject.org/~dwalsh/SELinux/F11/admin_usermanage.patch


passwd being changed via gui has output reset to user domain stream.

Samba_domain_controller redirects useradd output to its log files.