freeipa

#9434 Support SELinux booleans in the client installer
Closed: fixed by frenaud. Opened by abbra.

Closed: fixed
Reopen Issue

Passkeys integration uses libfido2 library which needs access to hardware. SSSD uses libfido2 and it needs a proper SELinux policy to be enabled to do so. SELinux policy in Fedora and RHEL will include sssd_use_usb boolean to trigger access to USB devices: https://github.com/fedora-selinux/selinux-policy/pull/1859

Add support for setting SELinux booleans in the client installer to support these operations.

Metadata Update from @abbra:
- Issue assigned to abbra

PR: https://github.com/freeipa/freeipa/pull/6978

Metadata Update from @abbra:
- Custom field on_review adjusted to https://github.com/freeipa/freeipa/pull/6978

master:

  • d355761f23fae412bb01a1d737cee342c7bd04f9 ipa-client-install: enable SELinux for SSSD

master:

  • 6aa3c3b6284967bd7d4d27afd9f82d3f7f679428 Restore selinux states if they exist at uninstall time

ipa-4-11:

  • d62be1da4542e91521b44595f2d41b557ba7a49e ipa-client-install: enable SELinux for SSSD
  • 2220f72321dc6af8a7a94e1fad1c6980ee4cf522 Restore selinux states if they exist at uninstall time

Metadata Update from @frenaud:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)

master:

  • 32721c4132c9836c95c83d000614550bb43d4665 Allow ipa-otpd to access USB devices for passkeys

ipa-4-11:

  • 637ccae0b4b0ecd36756b4540c666724a73f4633 Allow ipa-otpd to access USB devices for passkeys
Metadata
None
None
None
None
https://github.com/freeipa/freeipa/pull/6978
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.