mir/sudo
2
0
Fork 0
mirror of https://github.com/sudo-project/sudo.git synced 2025-08-22 09:57:41 +00:00
Code Issues Releases Wiki Activity

Cannot do direct exec of a command when SELinux RBAC is enabled.

Browse Source
This commit is contained in:
Todd C. Miller 2021-01-02 10:43:34 -07:00
parent f6452c7caf
commit 267b9a8a23
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
src/exec.c
View File

@ -345,7 +345,7 @@ direct_exec_allowed(struct command_details *details)
debug_decl(direct_exec_allowed, SUDO_DEBUG_EXEC);
/* Assumes sudo_needs_pty() was already checked. */
if (ISSET(details->flags, CD_SET_TIMEOUT|CD_SUDOEDIT) ||
if (ISSET(details->flags, CD_RBAC_ENABLED|CD_SET_TIMEOUT|CD_SUDOEDIT) ||
policy_plugin.u.policy->close != NULL)
debug_return_bool(false);