[Freeipa-devel] [PATCH] 0003 Add crond as a default HBAC service

[Ana Krivokapic]

On 01/15/2013 01:32 PM, Dmitri Pal wrote:
> On 01/15/2013 06:56 AM, Alexander Bokovoy wrote:
>> On Tue, 15 Jan 2013, Ana Krivokapic wrote:
>>> crond was not included in the list of default HBAC services - it
>>> needed to be added manually. As crond is a commonly used service, it
>>> is now included as a default HBAC service.
>>>
>>> Ticket: https://fedorahosted.org/freeipa/ticket/3215
>> ACK.
>>
>> Simple and obvious.
>>
>>> I'm not sure whether a design document is needed for this ticket. It
>>> _is_ marked as an RFE, but it is a pretty simple and specific change.
>>> After yesterday's meeting, I'm not really clear on whether a design
>>> page is needed in cases like this. Thoughts?
>> I suggested that additions like this do not need specific design
>> document.
>
> I suggest that we have a catch all page on the wiki that would be called
> "Minor Enhancements".
> It will consist of the table with two columns.
> First column would be the link to the ticket.
> The second column would be a short comment.
> F this ticket it will look like this:
>
> Enhancement                                   Comment
> https://fedorahosted.org/freeipa/ticket/3215  Crond was added to the list of available HBAC services
>
>
>
> Such approach would not break the reporting and would show what has been
> done for minor enhancements like this.
I created the Minor Enhancements wiki page and added the link to it on 
the Documentation page.

http://www.freeipa.org/page/V3_Minor_Enhancements

>> Since this is the whole patch:
>>> --- a/install/updates/50-hbacservice.update
>>> +++ b/install/updates/50-hbacservice.update
>>> @@ -1,3 +1,10 @@
>>> +dn: cn=crond,cn=hbacservices,cn=hbac,$SUFFIX
>>> +default:objectclass: ipahbacservice
>>> +default:objectclass: ipaobject
>>> +default:cn: crond
>>> +default:description: crond
>>> +default:ipauniqueid:autogenerate
>>> +
>>> dn: cn=vsftpd,cn=hbacservices,cn=hbac,$SUFFIX
>>> default:objectclass: ipahbacservice
>>> default:objectclass: ipaobject
>> .. I would simply add a link to the mail archive of this thread to the
>> ticket itself. Mailing archive of freeipa-devel@ is as stable as our
>> wiki, if not more resilient. ;)
>>
>


-- 
Regards,

Ana Krivokapic
Associate Software Engineer
FreeIPA team
Red Hat Inc.