Re: [Freeipa-devel] [PATCH] 0504 Default read ACIs for Sudo objects

2014-04-09 Thread Petr Viktorin
On 04/09/2014 04:02 PM, Martin Kosek wrote: On 04/09/2014 03:56 PM, Petr Viktorin wrote: On 04/09/2014 10:31 AM, Martin Kosek wrote: On 04/08/2014 05:19 PM, Petr Viktorin wrote: On 04/08/2014 12:46 PM, Martin Kosek wrote: On 04/08/2014 11:03 AM, Petr Viktorin wrote: On 04/07/2014 01:30 PM, M

Re: [Freeipa-devel] [PATCH] 0504 Default read ACIs for Sudo objects

2014-04-09 Thread Martin Kosek
On 04/09/2014 03:56 PM, Petr Viktorin wrote: > On 04/09/2014 10:31 AM, Martin Kosek wrote: >> On 04/08/2014 05:19 PM, Petr Viktorin wrote: >>> On 04/08/2014 12:46 PM, Martin Kosek wrote: On 04/08/2014 11:03 AM, Petr Viktorin wrote: > On 04/07/2014 01:30 PM, Martin Kosek wrote: >> On 04

Re: [Freeipa-devel] [PATCH] 0504 Default read ACIs for Sudo objects

2014-04-09 Thread Petr Viktorin
On 04/09/2014 10:31 AM, Martin Kosek wrote: On 04/08/2014 05:19 PM, Petr Viktorin wrote: On 04/08/2014 12:46 PM, Martin Kosek wrote: On 04/08/2014 11:03 AM, Petr Viktorin wrote: On 04/07/2014 01:30 PM, Martin Kosek wrote: On 04/03/2014 12:09 PM, Petr Viktorin wrote: Hello, This adds read per

Re: [Freeipa-devel] [PATCH] 0504 Default read ACIs for Sudo objects

2014-04-09 Thread Martin Kosek
On 04/08/2014 05:19 PM, Petr Viktorin wrote: > On 04/08/2014 12:46 PM, Martin Kosek wrote: >> On 04/08/2014 11:03 AM, Petr Viktorin wrote: >>> On 04/07/2014 01:30 PM, Martin Kosek wrote: On 04/03/2014 12:09 PM, Petr Viktorin wrote: > Hello, > This adds read permissions to read Sudo com

Re: [Freeipa-devel] [PATCH] 0504 Default read ACIs for Sudo objects

2014-04-08 Thread Petr Viktorin
On 04/08/2014 12:46 PM, Martin Kosek wrote: On 04/08/2014 11:03 AM, Petr Viktorin wrote: On 04/07/2014 01:30 PM, Martin Kosek wrote: On 04/03/2014 12:09 PM, Petr Viktorin wrote: Hello, This adds read permissions to read Sudo commands, command groups, rules. Read access is given to all authent

Re: [Freeipa-devel] [PATCH] 0504 Default read ACIs for Sudo objects

2014-04-08 Thread Martin Kosek
On 04/08/2014 11:03 AM, Petr Viktorin wrote: > On 04/07/2014 01:30 PM, Martin Kosek wrote: >> On 04/03/2014 12:09 PM, Petr Viktorin wrote: >>> Hello, >>> This adds read permissions to read Sudo commands, command groups, rules. >>> >>> Read access is given to all authenticated users. >> >> Looks goo

Re: [Freeipa-devel] [PATCH] 0504 Default read ACIs for Sudo objects

2014-04-08 Thread Petr Viktorin
On 04/07/2014 01:30 PM, Martin Kosek wrote: On 04/03/2014 12:09 PM, Petr Viktorin wrote: Hello, This adds read permissions to read Sudo commands, command groups, rules. Read access is given to all authenticated users. Looks good. What about "ou=sudoers"? I think we should also allow it in thi

Re: [Freeipa-devel] [PATCH] 0504 Default read ACIs for Sudo objects

2014-04-07 Thread Martin Kosek
On 04/03/2014 12:09 PM, Petr Viktorin wrote: > Hello, > This adds read permissions to read Sudo commands, command groups, rules. > > Read access is given to all authenticated users. Looks good. What about "ou=sudoers"? I think we should also allow it in this patch for authenticated users. This is

[Freeipa-devel] [PATCH] 0504 Default read ACIs for Sudo objects

2014-04-03 Thread Petr Viktorin
Hello, This adds read permissions to read Sudo commands, command groups, rules. Read access is given to all authenticated users. -- PetrĀ³ From bb9ff134db5427621b13f94e062ed24f725bc280 Mon Sep 17 00:00:00 2001 From: Petr Viktorin Date: Wed, 26 Mar 2014 14:19:44 +0100 Subject: [PATCH] Add manage