mir/sudo
2
0
Fork 0
mirror of https://github.com/sudo-project/sudo.git synced 2025-08-31 14:25:15 +00:00
Code Issues Releases Wiki Activity

Allow SELinux support to be disabled via the sudoers file.

Browse Source 
Defaults to true if sudo is built with SELinux support and SELinux
is not disabled on the system.
This commit is contained in:
Todd C. Miller
2021-01-08 19:29:17 -07:00
parent 4603da02af
commit 1b72d6a5cc
8 changed files with 45 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
plugins/sudoers/policy.c
View File

@@ -839,11 +839,11 @@ sudoers_policy_store_result(bool accepted, char *argv[], char *envp[],
}
#endif /* HAVE_LOGIN_CAP_H */
#ifdef HAVE_SELINUX
if (user_role != NULL) {
if (def_selinux && user_role != NULL) {
if ((command_info[info_len++] = sudo_new_key_val("selinux_role", user_role)) == NULL)
goto oom;
}
if (user_type != NULL) {
if (def_selinux && user_type != NULL) {
if ((command_info[info_len++] = sudo_new_key_val("selinux_type", user_type)) == NULL)
goto oom;
}