DHCPd supports LDAP backend infrastructure
PATCH 1/1 DHCPd supports LDAP backend infrastructure
The DHCP daemon supports LDAP as a back-end infrastructure too (next to its file-based backend).
Signed-off-by Sven Vermeulen <[email protected]>
--- dhcp.te | 1 + 1 files changed, 1 insertions(+), 0 deletions(-)
dhcp.te +1 -0
@@ -97,6 +97,7 @@ logging_send_syslog_msg(dhcpd_t) miscfiles_read_localization(dhcpd_t) sysnet_read_dhcp_config(dhcpd_t) +sysnet_use_ldap(dhcpd_t) userdom_dontaudit_use_unpriv_user_fds(dhcpd_t) userdom_dontaudit_search_user_home_dirs(dhcpd_t)
Signature · 1 line
1.7.3.4
PATCH 1/1 DHCPd supports LDAP backend infrastructure
Quoted 2 lines · Sven Vermeulen
The DHCP daemon supports LDAP as a back-end infrastructure too (next to its file-based backend).
I think we want to make this conditional, as that adds a bunch of extra networking permissions to a relatively privileged domain, for an uncommon case.
Quoted 17 lines
Signed-off-by Sven Vermeulen <[email protected]>--- dhcp.te | 1 + 1 files changed, 1 insertions(+), 0 deletions(-)dhcp.te +1
-0@@ -97,6 +97,7 @@ logging_send_syslog_msg(dhcpd_t) miscfiles_read_localization(dhcpd_t) sysnet_read_dhcp_config(dhcpd_t) +sysnet_use_ldap(dhcpd_t) userdom_dontaudit_use_unpriv_user_fds(dhcpd_t) userdom_dontaudit_search_user_home_dirs(dhcpd_t)
Signature · 3 lines
Chris PeBenito Tresys Technology, LLC www.tresys.com | oss.tresys.com