mirror of
https://github.com/sudo-project/sudo.git
synced 2025-08-31 14:25:15 +00:00
Make sesh path configurable in sudo.conf
This commit is contained in:
@@ -366,9 +366,17 @@ selinux_execve(const char *path, char *const argv[], char *const envp[],
|
||||
int noexec)
|
||||
{
|
||||
char **nargv;
|
||||
const char *sesh;
|
||||
int argc, serrno;
|
||||
debug_decl(selinux_execve, SUDO_DEBUG_SELINUX)
|
||||
|
||||
sesh = sudo_conf_sesh_path();
|
||||
if (sesh == NULL) {
|
||||
warningx("internal error: sesh path not set");
|
||||
errno = EINVAL;
|
||||
debug_return;
|
||||
}
|
||||
|
||||
if (setexeccon(se_state.new_context)) {
|
||||
warning(_("unable to set exec context to %s"), se_state.new_context);
|
||||
if (se_state.enforcing)
|
||||
@@ -399,7 +407,7 @@ selinux_execve(const char *path, char *const argv[], char *const envp[],
|
||||
memcpy(&nargv[2], &argv[1], argc * sizeof(char *)); /* copies NULL */
|
||||
|
||||
/* sesh will handle noexec for us. */
|
||||
sudo_execve(_PATH_SUDO_SESH, nargv, envp, 0);
|
||||
sudo_execve(sesh, nargv, envp, 0);
|
||||
serrno = errno;
|
||||
free(nargv);
|
||||
errno = serrno;
|
||||
|
Reference in New Issue
Block a user