URL: https://github.com/SSSD/sssd/pull/342
Title: #342: SELINUX: Use getseuserbyname to get IPA seuser

bachradsusi commented:
"""
When you need to manage - add/remove - SELinux login mappings you need to use 
libsemanage as you do now. There's no such interface in libselinux.

As for the `getseuserbyname()` part, it looks good to me.

If you wanted to use same library for both `get_user` and `del_user` the 
original `get_seuser` could be enhanced to use `__default__` user when there's 
no existing SELinux login mapping. But I would consider this to be more error 
prone than `getseuserbyname()`
"""

See the full comment at 
https://github.com/SSSD/sssd/pull/342#issuecomment-327203254
_______________________________________________
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org

Reply via email to