Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

selinux: Permit using systemd-userdbd #4892

Merged

Conversation

debarshiray
Copy link
Contributor

The systemd-userdbd service was added in systemd 245, which was
released in March 2020 and is available in RHEL 9. Therefore, it's
safe to assume that the systemd_userdbd_stream_connect() SELinux
interface is also available on all relevant operating systems, unless
there's reason to believe otherwise.

https://bugzilla.redhat.com/show_bug.cgi?id=2071217

The systemd-userdbd service was added in systemd 245, which was
released in March 2020 and is available in RHEL 9.  Therefore, it's
safe to assume that the systemd_userdbd_stream_connect() SELinux
interface is also available on all relevant operating systems, unless
there's reason to believe otherwise.

https://bugzilla.redhat.com/show_bug.cgi?id=2071217
@debarshiray
Copy link
Contributor Author

I don't know much about systemd-userdbd beyond reading what's there in the manuals, and I don't know exactly how or why the flatpak-system-helper might be using it, or what happens when it can't do so.

I suppose flatpak-system-helper is using systemd-userdbd for the same reason that it tries to read /etc/passwd, and this is happening through nss-systemd, and it falls back to reading /etc/passwd when that fails. Is that right?

@debarshiray
Copy link
Contributor Author

Ping @zpytela

@alexlarsson alexlarsson merged commit 4965e5d into flatpak:main Jun 3, 2022
@debarshiray debarshiray deleted the wip/rishi/selinux-userdb-read branch June 3, 2022 11:43
@debarshiray
Copy link
Contributor Author

Thanks, @alexlarsson

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants