[Freeipa-devel] [PATCH 0033] Prevent changing protected group's name using --setattr

Rob Crittenden rcritten at redhat.com
Tue Feb 19 21:57:48 UTC 2013


Petr Viktorin wrote:
> On 02/11/2013 11:17 AM, Tomas Babej wrote:
>> Hi,
>>
>> The name of any protected group now cannot be changed by modifing
>> the cn attribute using --setattr. Unit tests have been added to
>> make sure there is no regression.
>>
>> https://fedorahosted.org/freeipa/ticket/3354
>>
>> Tomas
>>
>
> We need a better general way to validate getattr/setattr on known
> atributes, but works well for now. ACK
>
>

Pushed to master and ipa-3-1

rob




More information about the Freeipa-devel mailing list