* sudo patch
@ 2007-03-08 15:19 Daniel J Walsh
0 siblings, 0 replies; only message in thread
From: Daniel J Walsh @ 2007-03-08 15:19 UTC (permalink / raw)
To: Christopher J. PeBenito, SE Linux
[-- Attachment #1: Type: text/plain, Size: 95 bytes --]
sudo needs to be able to getattr on all executables and secure_mode is
not used in interface.
[-- Attachment #2: sudo.patch --]
[-- Type: text/x-patch, Size: 716 bytes --]
--- nsaserefpolicy/policy/modules/admin/sudo.if 2007-02-19 11:32:54.000000000 -0500
+++ serefpolicy-2.5.8/policy/modules/admin/sudo.if 2007-03-08 08:42:36.000000000 -0500
@@ -37,7 +37,6 @@
gen_require(`
type sudo_exec_t;
- bool secure_mode;
')
##############################
@@ -92,12 +91,10 @@
fs_getattr_xattr_fs($1_sudo_t)
auth_domtrans_chk_passwd($1_sudo_t)
- # sudo stores a token in the pam_pid directory
auth_manage_pam_pid($1_sudo_t)
- corecmd_getattr_bin_files($1_sudo_t)
corecmd_read_sbin_symlinks($1_sudo_t)
- corecmd_getattr_sbin_files($1_sudo_t)
+ corecmd_getattr_all_executables($1_sudo_t)
domain_use_interactive_fds($1_sudo_t)
domain_sigchld_interactive_fds($1_sudo_t)
^ permalink raw reply [flat|nested] only message in thread
only message in thread, other threads:[~2007-03-08 15:20 UTC | newest]
Thread overview: (only message) (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2007-03-08 15:19 sudo patch Daniel J Walsh
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.