|
|
905b4d |
From 1afda474301754a095c55497aaee1fd038a8dcd0 Mon Sep 17 00:00:00 2001
|
|
|
905b4d |
From: Jakub Hrozek <jhrozek@redhat.com>
|
|
|
905b4d |
Date: Fri, 17 Oct 2014 17:31:31 +0200
|
|
|
905b4d |
Subject: [PATCH 39/46] PAC: Run the pac responder as the SSSD user
|
|
|
905b4d |
|
|
|
905b4d |
Reviewed-by: Pavel Reichl <preichl@redhat.com>
|
|
|
905b4d |
Reviewed-by: Simo Sorce <simo@redhat.com>
|
|
|
905b4d |
(cherry picked from commit 22f4bcbb211bf800af647ad1fc9595a8020a6fe6)
|
|
|
905b4d |
---
|
|
|
905b4d |
src/monitor/monitor.c | 3 ++-
|
|
|
905b4d |
src/responder/pac/pacsrv.c | 3 ++-
|
|
|
905b4d |
2 files changed, 4 insertions(+), 2 deletions(-)
|
|
|
905b4d |
|
|
|
905b4d |
diff --git a/src/monitor/monitor.c b/src/monitor/monitor.c
|
|
|
905b4d |
index 4e461aa78e47ec6cedb77dd030f72c273a00a495..61a9f0b849a460da88b393b4f08795fb7a571886 100644
|
|
|
905b4d |
--- a/src/monitor/monitor.c
|
|
|
905b4d |
+++ b/src/monitor/monitor.c
|
|
|
905b4d |
@@ -1064,7 +1064,8 @@ static bool svc_supported_as_nonroot(const char *svc_name)
|
|
|
905b4d |
{
|
|
|
905b4d |
if ((strcmp(svc_name, "nss") == 0)
|
|
|
905b4d |
|| (strcmp(svc_name, "pam") == 0)
|
|
|
905b4d |
- || (strcmp(svc_name, "autofs") == 0)) {
|
|
|
905b4d |
+ || (strcmp(svc_name, "autofs") == 0)
|
|
|
905b4d |
+ || (strcmp(svc_name, "pac") == 0)) {
|
|
|
905b4d |
return true;
|
|
|
905b4d |
}
|
|
|
905b4d |
return false;
|
|
|
905b4d |
diff --git a/src/responder/pac/pacsrv.c b/src/responder/pac/pacsrv.c
|
|
|
905b4d |
index e427cd756f4031218a8fb99c30bf709e21680039..3eb21c8fff85343249494bcc06d97cda4b738034 100644
|
|
|
905b4d |
--- a/src/responder/pac/pacsrv.c
|
|
|
905b4d |
+++ b/src/responder/pac/pacsrv.c
|
|
|
905b4d |
@@ -247,7 +247,8 @@ int main(int argc, const char *argv[])
|
|
|
905b4d |
/* set up things like debug, signals, daemonization, etc... */
|
|
|
905b4d |
debug_log_file = "sssd_pac";
|
|
|
905b4d |
|
|
|
905b4d |
- ret = server_setup("sssd[pac]", 0, 0, 0, CONFDB_PAC_CONF_ENTRY, &main_ctx);
|
|
|
905b4d |
+ ret = server_setup("sssd[pac]", 0, uid, gid,
|
|
|
905b4d |
+ CONFDB_PAC_CONF_ENTRY, &main_ctx);
|
|
|
905b4d |
if (ret != EOK) return 2;
|
|
|
905b4d |
|
|
|
905b4d |
ret = die_if_parent_died();
|
|
|
905b4d |
--
|
|
|
905b4d |
1.9.3
|
|
|
905b4d |
|