From 3eb732581d4fc1f2a32d2e4bf2b7fc60a190e3c5 Mon Sep 17 00:00:00 2001
From: Alexey Tikhonov <atikhono@redhat.com>
Date: Mon, 2 Dec 2024 18:41:49 +0100
Subject: [PATCH] TEST.

---
 src/providers/ipa/selinux_child.c | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/src/providers/ipa/selinux_child.c b/src/providers/ipa/selinux_child.c
index 8a968a27570..a3374d4d68c 100644
--- a/src/providers/ipa/selinux_child.c
+++ b/src/providers/ipa/selinux_child.c
@@ -301,6 +301,7 @@ int main(int argc, const char *argv[])
     /* libsemanage calls access(2) which works with real IDs, not effective.
      * We need to switch also the real ID to 0.
      */
+/*
     if (getuid() != 0) {
         ret = setuid(0);
         if (ret == -1) {
@@ -318,6 +319,7 @@ int main(int argc, const char *argv[])
                   "setgid failed: %d, selinux_child might not work!\n", ret);
         }
     }
+*/
 
     DEBUG(SSSDBG_TRACE_INTERNAL,
           "Running with real IDs [%"SPRIuid"][%"SPRIgid"].\n",