Re: can_ypbind()

On Tue, 2004-03-09 at 07:46, Russell Coker wrote:
> Also it seems that anything which needs NIS access will also need NSCD or LDAP
> access depending on the configuration of the system. So maybe instead of
> can_ypbind() we should have can_account_lookup() (or some better name) which
> will then permit NIS, NIS+, LDAP, NSCD, or whatever else is necessary to do
> the job.

Possibly can_nameservice or can_nsswitch, and cover the possibilities present in /etc/nsswitch.conf, e.g. NIS+, NIS, DNS, local /etc file reading, hesiod, etc.

-- 
Stephen Smalley <sds@epoch.ncsc.mil>
National Security Agency


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.