2
0
mirror of https://github.com/sudo-project/sudo.git synced 2025-09-02 07:15:27 +00:00

We do not pass apparmor_profile from the front-end to the policy.

There is no command line option to specify a profile, it is only
passed from the policy to the front-end.
This commit is contained in:
Todd C. Miller
2024-05-06 11:45:12 -06:00
parent 720a1450e7
commit 43ffe34ab4
3 changed files with 0 additions and 10 deletions

View File

@@ -333,14 +333,6 @@ sudoers_policy_deserialize_info(struct sudoers_context *ctx, void *v,
goto oom;
continue;
}
if (MATCHES(*cur, "apparmor_profile=")) {
CHECK(*cur, "apparmor_profile=");
free(ctx->runas.apparmor_profile);
ctx->runas.apparmor_profile = strdup(*cur + sizeof("apparmor_profile=") - 1);
if (ctx->runas.apparmor_profile == NULL)
goto oom;
continue;
}
#ifdef HAVE_BSD_AUTH_H
if (MATCHES(*cur, "bsdauth_type=")) {
CHECK(*cur, "bsdauth_type=");