semanage support for nsswitch

semanage support for nsswitch

[Matthew Thode]

[-- Attachment #1: Type: text/plain, Size: 133 bytes --]

I've noticed that semanage does not support nsswitch, is there a reason
for this or am I somehow blind?

-- 
-- Matthew Thode


[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 836 bytes --]

Re: semanage support for nsswitch

[Sven Vermeulen]

[-- Attachment #1: Type: text/plain, Size: 437 bytes --]

On Mar 14, 2013 9:18 PM, "Matthew Thode" <mthode@mthode.org> wrote:
>
> I've noticed that semanage does not support nsswitch, is there a reason
> for this or am I somehow blind?

As I'm about to move towards ldap authentication i'm interested in this as
well. Especially for group information this would be very interesting as I
can then assign users to their SELinux user counterpart based on the
primary group (if I read it all well).

[-- Attachment #2: Type: text/html, Size: 571 bytes --]

Re: semanage support for nsswitch

[Daniel J Walsh]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 04/09/2013 04:32 PM, Sven Vermeulen wrote:
> 
> On Mar 14, 2013 9:18 PM, "Matthew Thode" <mthode@mthode.org 
> <mailto:mthode@mthode.org>> wrote:
>> 
>> I've noticed that semanage does not support nsswitch, is there a reason 
>> for this or am I somehow blind?
> 
> As I'm about to move towards ldap authentication i'm interested in this as
> well. Especially for group information this would be very interesting as I
> can then assign users to their SELinux user counterpart based on the
> primary group (if I read it all well).
> 
semanage uses getpw/getgr calls so it does support nsswitch.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.13 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iEYEARECAAYFAlFlbGYACgkQrlYvE4MpobOvbwCfejkyGKiKFkjxq+jsNL4kC+pF
FCoAmwaWH4JINdjczVptlhMNjGCNvG00
=cL7B
-----END PGP SIGNATURE-----

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.