[refpolicy] services_nscd.patch
Daniel J Walsh
dwalsh at redhat.com
Fri Feb 12 15:45:27 CST 2010
On 02/12/2010 02:54 PM, Christopher J. PeBenito wrote:
> On Thu, 2009-11-12 at 16:44 -0500, Daniel J Walsh wrote:
>> http://people.fedoraproject.org/~dwalsh/SELinux/F12/services_nscd.patch
>>
>> Added boolean to make nscd_use_shm the default for speed purposes.
>> auth_use_nsswitch now uses this.
>>
>> package maintainer asked for this.
>
> Are you referring to a change in default for nsswitch or for nscd?
>
> If its actually changing nsswitch's behavior to make it connect over shm
> instead of over socket, the conditional should go in auth_use_nsswitch
> instead. So then it would look like this in auth_use_nsswitch:
>
> tunable_policy(`auth_nscd_shm',`
> nscd_shm_use($1)
> ',`
> nscd_socket_use($1)
> ')
>
That is fine.
More information about the refpolicy
mailing list