SSSD / sssd

#1744 selinux: reuse IPA_HBAC_REFRESH or provide an alternative
Closed: Fixed Opened by jhrozek.

Closed: Fixed
Reopen Issue

The HBAC code has a short-lived IPA_HBAC_REFRESH timeout that tells the responder to reuse cached entries if two requests come within the interval. We should reuse it in selinux processing or provide a similar alternative to provide better performance.

No visible change except for better performance if theres' many maps. Doesn't need a clone.

rhbz: => 0

Fields changed

milestone: NEEDS_TRIAGE => SSSD 1.10 beta

Fields changed

owner: somebody => mzidek

Fields changed

patch: 0 => 1
  • master:
    • 2ff2a7469ef0b23b3feb418f3ecfa8cfbfa2239c
    • ba4378f49914e65a7d687a872d9b938173841154

resolution: => fixed
review: => 0
status: new => closed

Metadata Update from @jhrozek:
- Issue assigned to mzidek
- Issue set to the milestone: SSSD 1.10 beta

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/2786

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.
Metadata
None
None
None
Normal
defect
SSSD
1.9.3
0
1
0
0
0
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.