fcos.filesystem: add sssd helpers to setuid filter
SSSD is moving to running as its own system user instead of as root.
Part of this move involves adding setuid helpers with mode 4750 in order
to read some privileged information before dropping privs.
Those files trigger our setuid filter. Add them to the list.
@@ -93,6 +93,9 @@ func SUIDFiles(c cluster.TestCluster) {
"/usr/lib/polkit-1/polkit-agent-helper-1",
"/usr/lib64/polkit-1/polkit-agent-helper-1",
"/usr/libexec/dbus-daemon-launch-helper",
+ "/usr/libexec/sssd/krb5_child",
+ "/usr/libexec/sssd/ldap_child",
+ "/usr/libexec/sssd/selinux_child",
"/usr/sbin/mount.nfs",
"/usr/sbin/unix_chkpwd",
"/usr/sbin/grub2-set-bootflag",
