Support LDAPS for nsswitch-related network activity
PATCH 1/1 Support LDAPS for nsswitch-related network activity
Systems that use LDAPS (LDAP over SSL/TLS) for their sysnet_* activities currently fail since these domains do not allow proper access to the random devices (needed for SSL/TLS). This patch adds this privilege to sysnet_use_ldap.
Signed-off-by Sven Vermeulen <[email protected]>
--- policy/modules/system/sysnetwork.if | 4 ++++ 1 files changed, 4 insertions(+), 0 deletions(-)
policy/modules/system/sysnetwork.if +4 -0
@@ -698,6 +698,10 @@ interface(`sysnet_use_ldap',` corenet_sendrecv_ldap_client_packets($1) sysnet_read_config($1) + + # Support for LDAPS + dev_read_rand($1) + dev_read_urand($1) ') ########################################
Signature · 1 line
1.7.3.4
PATCH 1/1 Support LDAPS for nsswitch-related network activity
Quoted 15 lines · Sven Vermeulen
Systems that use LDAPS (LDAP over SSL/TLS) for their sysnet_* activities currently fail since these domains do not allow proper access to the random devices (needed for SSL/TLS). This patch adds this privilege to
sysnet_use_ldap.Signed-off-by Sven Vermeulen <[email protected]>--- policy/modules/system/sysnetwork.if | 4 ++++ 1 files changed, 4 insertions(+), 0 deletions(-)policy/modules/system/sysnetwork.if +0
-0
policy/modules/system/sysnetwork.if interface(`sysnet_use_ldap',` · line 707
Quoted 10 lines
policy/modules/system/sysnetwork.if +4
-0@@ -698,6 +698,10 @@ interface(`sysnet_use_ldap',` corenet_sendrecv_ldap_client_packets($1) sysnet_read_config($1) + + # Support for LDAPS + dev_read_rand($1) + dev_read_urand($1) ') ########################################
Merged.
Signature · 3 lines
Chris PeBenito Tresys Technology, LLC www.tresys.com | oss.tresys.com