On Mon, 12 Mar 2012, Rob Crittenden wrote:
> Alexander Bokovoy wrote:
> >On Wed, 07 Mar 2012, Rob Crittenden wrote:
> >
> >>Set SELinux boolean httpd_manage_ipa so ipa_memcached will work in
> >>enforcing mode.
> >>
> >>This is being done in the HTTP instance so we can set both booleans
> >>in one step and save a bit of time (it is still slow).
> >I would prefer all platform-specific manipulations of security
> >policies to be moved to platform-specific module.
> >
> >Make a HTTP class there (like I did dirsrv class in systemd
> >backend) and perform manipulations on service enable.
> >
> >This way main code will stay clear of platform-specific code.
> >
> >Sorry for not looking into the issue before.
> >
> 
> I'd prefer to keep the change simple for now and do the big move post 2.2.
ACK on condition you'd file a ticket for the post 2.2 work.

:)

-- 
/ Alexander Bokovoy

_______________________________________________
Freeipa-devel mailing list
Freeipa-devel@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-devel

Reply via email to