Re: [Freeipa-devel] [PATCH] 1054 new default SELinux user map user

2012-09-13 Thread Martin Kosek
On 09/13/2012 12:28 PM, Jakub Hrozek wrote: On Tue, Sep 11, 2012 at 11:19:59AM -0400, Rob Crittenden wrote: Jakub Hrozek wrote: On Mon, Sep 10, 2012 at 05:38:47PM -0400, Rob Crittenden wrote: We've decided to change the default SELinux user map user to the OS default which is unconfined_u. It

Re: [Freeipa-devel] [PATCH] 1054 new default SELinux user map user

2012-09-11 Thread Rob Crittenden
Jakub Hrozek wrote: On Mon, Sep 10, 2012 at 05:38:47PM -0400, Rob Crittenden wrote: We've decided to change the default SELinux user map user to the OS default which is unconfined_u. It would be too drastic to go from one extreme to another. rob How does one set an empty default that the

[Freeipa-devel] [PATCH] 1054 new default SELinux user map user

2012-09-10 Thread Rob Crittenden
We've decided to change the default SELinux user map user to the OS default which is unconfined_u. It would be too drastic to go from one extreme to another. rob From 9b6c7cc0d9eb64ecb818fdde0ef32ba9ffa127f9 Mon Sep 17 00:00:00 2001 From: Rob Crittenden rcrit...@redhat.com Date: Mon, 10 Sep

Re: [Freeipa-devel] [PATCH] 1054 new default SELinux user map user

2012-09-10 Thread Jakub Hrozek
On Mon, Sep 10, 2012 at 05:38:47PM -0400, Rob Crittenden wrote: We've decided to change the default SELinux user map user to the OS default which is unconfined_u. It would be too drastic to go from one extreme to another. rob How does one set an empty default that the SSSD would treat as