summaryrefslogtreecommitdiff
path: root/src/util/sss_utf8.c
diff options
context:
space:
mode:
authorJan Zeleny <jzeleny@redhat.com>2012-07-24 15:36:10 -0400
committerJakub Hrozek <jhrozek@redhat.com>2012-07-27 10:37:06 +0200
commit7016947229edcaa268a82bf69fde37e521b13233 (patch)
tree0e763d33622f8173b8c2e89986707a3ae7d0e6e4 /src/util/sss_utf8.c
parent38e2ec1c757955ab557fd95807afa58042d09482 (diff)
downloadsssd-7016947229edcaa268a82bf69fde37e521b13233.tar.gz
sssd-7016947229edcaa268a82bf69fde37e521b13233.tar.bz2
sssd-7016947229edcaa268a82bf69fde37e521b13233.zip
Move SELinux processing from session to account PAM stack
The idea is to rename session provider to selinux provider. Processing of SELinux rules has to be performed in account stack in order to ensure that pam_selinux (which is the first module in PAM session stack) will get the correct input from SSSD. Processing of account PAM stack is bound to access provider. That means we need to have two providers executed when SSS_PAM_ACCT_MGMT message is received from PAM responder. Change in data_provider_be.c ensures just that - after access provider finishes its actions, the control is given to selinux provider and only after this provider finishes is the result returned to PAM responder.
Diffstat (limited to 'src/util/sss_utf8.c')
0 files changed, 0 insertions, 0 deletions