Re: [PATCH] pam_namespace : option to check instance parent mode and man page(s) updates

[Janak Desai <janak@us.ibm.com>]

Tomas Mraz wrote:
> On Wed, 2006-05-31 at 17:32 -0400, Janak Desai wrote:
> 
>>This patch, which applies on top of the latest pam_namespace in rawhide, adds a new
>>command line option to allow an admin to bypass checking of the instance parent 
>>mode. It also updates namespace.conf and pam_namespace man pages to add text
>>relating this new option, interaction with share-subtree and possible config 
>>changes that would allow the use of pam_namespace with gdm and polyinstantiation
>>of /tmp.
> 
> 
> In the documentation files there is always written that the mode of the
> parent directory is checked to be 1000 but in the code you check only
> the user, group and other bits. Should the documentation be adjusted to
> say 000?

Oops. The documentation is correct. The code should also check for the
sticky bit. I will fix that and send updated patch later this afternoon.

-Janak

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.