mir/sudo
2
0
Fork 0
mirror of https://github.com/sudo-project/sudo.git synced 2025-08-22 09:57:41 +00:00
Code Issues Releases Wiki Activity

We do not pass apparmor_profile from the front-end to the policy.

Browse Source 
There is no command line option to specify a profile, it is only
passed from the policy to the front-end.
This commit is contained in:
Todd C. Miller 2024-05-06 11:45:12 -06:00
parent 720a1450e7
commit 43ffe34ab4
3 changed files with 0 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
plugins/sudoers/policy.c
View File

@ -333,14 +333,6 @@ sudoers_policy_deserialize_info(struct sudoers_context *ctx, void *v,
goto oom; goto oom;
continue; continue;
} }
if (MATCHES(*cur, "apparmor_profile=")) {
CHECK(*cur, "apparmor_profile=");
free(ctx->runas.apparmor_profile);
ctx->runas.apparmor_profile = strdup(*cur + sizeof("apparmor_profile=") - 1);
if (ctx->runas.apparmor_profile == NULL)
goto oom;
continue;
}
#ifdef HAVE_BSD_AUTH_H #ifdef HAVE_BSD_AUTH_H
if (MATCHES(*cur, "bsdauth_type=")) { if (MATCHES(*cur, "bsdauth_type=")) {
CHECK(*cur, "bsdauth_type="); CHECK(*cur, "bsdauth_type=");

1
src/parse_args.c
View File

@ -85,7 +85,6 @@ static struct sudo_settings sudo_settings[] = {
{ "askpass" }, { "askpass" },
{ "intercept_setid" }, { "intercept_setid" },
{ "intercept_ptrace" }, { "intercept_ptrace" },
{ "apparmor_profile" },
{ NULL } { NULL }
}; };

1
src/sudo.h
View File

@ -105,7 +105,6 @@
#define ARG_ASKPASS 26 #define ARG_ASKPASS 26
#define ARG_INTERCEPT_SETID 27 #define ARG_INTERCEPT_SETID 27
#define ARG_INTERCEPT_PTRACE 28 #define ARG_INTERCEPT_PTRACE 28
#define ARG_APPARMOR_PROFILE 29
/* /*
* Flags for tgetpass() * Flags for tgetpass()