Re: [Freeipa-devel] [PATCH] 313 Validate SELinux users in config-mod

2012-09-27 Thread Martin Kosek
On 09/26/2012 08:31 PM, Rob Crittenden wrote: Martin Kosek wrote: On 09/26/2012 12:32 PM, Petr Viktorin wrote: On 09/26/2012 12:25 PM, Petr Viktorin wrote: I found strange behavior in validate_selinuxuser. Perhaps it's material for another ticket. This command passes validation: $ ./ipa

Re: [Freeipa-devel] [PATCH] 313 Validate SELinux users in config-mod

2012-09-27 Thread Petr Viktorin
On 09/27/2012 09:59 AM, Martin Kosek wrote: On 09/26/2012 08:31 PM, Rob Crittenden wrote: Martin Kosek wrote: On 09/26/2012 12:32 PM, Petr Viktorin wrote: On 09/26/2012 12:25 PM, Petr Viktorin wrote: I found strange behavior in validate_selinuxuser. Perhaps it's material for another ticket.

Re: [Freeipa-devel] [PATCH] 313 Validate SELinux users in config-mod

2012-09-27 Thread Martin Kosek
On 09/27/2012 10:42 AM, Petr Viktorin wrote: On 09/27/2012 09:59 AM, Martin Kosek wrote: On 09/26/2012 08:31 PM, Rob Crittenden wrote: Martin Kosek wrote: On 09/26/2012 12:32 PM, Petr Viktorin wrote: On 09/26/2012 12:25 PM, Petr Viktorin wrote: I found strange behavior in

Re: [Freeipa-devel] [PATCH] 313 Validate SELinux users in config-mod

2012-09-26 Thread Rob Crittenden
Martin Kosek wrote: On 09/26/2012 12:32 PM, Petr Viktorin wrote: On 09/26/2012 12:25 PM, Petr Viktorin wrote: I found strange behavior in validate_selinuxuser. Perhaps it's material for another ticket. This command passes validation: $ ./ipa config_mod

[Freeipa-devel] [PATCH] 313 Validate SELinux users in config-mod

2012-09-25 Thread Martin Kosek
config-mod is capable of changing default SELinux user map order and a default SELinux user. Validate the new config values to prevent bogus default SELinux users to be assigned to IPA users. https://fedorahosted.org/freeipa/ticket/2993 --- Note: I removed the previous validate construct: -