Skip to contentSkip to conversation

allow nslcd to connect to remote ldap servers

PATCH New Matthew Thode 2 participants 2 messages Jul 17, 2012 – Jul 24, 2012

lore
Share & tools
lore
#0 lore raw

PATCH 1/1 allow nslcd to connect to remote ldap servers

Nslcd is a daemon that allows centralized user management through ldap. Currently it cannot connect to remote ldap instance through name_connect. I am enabling that access with this patch.

nslcd.te renamed from nslcd.te.orig +2 -0
@@ -44,6 +44,8 @@
 
 miscfiles_read_localization(nslcd_t)
 
+corenet_tcp_connect_ldap_port(nslcd_t)
+
 optional_policy(`
 	ldap_stream_connect(nslcd_t)
 ')
Signature · 10 lines
-- Matthew Thode


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 900 bytes
Desc: OpenPGP digital signature
Url : http://oss.tresys.com/pipermail/refpolicy/attachments/20120717/e7de231d/attachment.bin 
#1 lore raw

PATCH 1/1 allow nslcd to connect to remote ldap servers

Quoted 9 lines · Matthew Thode

Nslcd is a daemon that allows centralized user management through ldap. Currently it cannot connect to remote ldap instance through name_connect. I am enabling that access with this patch.

nslcd.te line 51

Quoted 8 lines
nslcd.te renamed from nslcd.te.orig +2 -0
@@ -44,6 +44,8 @@
 
 miscfiles_read_localization(nslcd_t)
 
+corenet_tcp_connect_ldap_port(nslcd_t)
+
 optional_policy(`
 	ldap_stream_connect(nslcd_t)
 ')

Merged.

Signature · 3 lines
Chris PeBenito
Tresys Technology, LLC
www.tresys.com | oss.tresys.com