[Freeipa-devel] [freeipa PR#314][comment] RFC: privilege separation for ipa framework code

[simo5]

  URL: https://github.com/freeipa/freeipa/pull/314
Title: #314: RFC: privilege separation for ipa framework code

simo5 commented:
"""
Ok split the last stuff in 3 commits.
I remove the use of private ccache for a few reasons:
1. touches environment variables.
2. will unconditionally remove a ccache even when passed in, so it may end up removing the wrong thing
3. private_ccache is used in dcerpc code and I do not want to change semantics and risk breaking tat code path
4. This fix is much smaller and removes one more yield, which is not a bad thing as it makes the code easier to read.
"""

See the full comment at https://github.com/freeipa/freeipa/pull/314#issuecomment-279700179